Vol. 2 No. 006 (2025): Professionalitet, 2025

Professionalitet, 2025

01.06.2025

ISSUES OF PROTECTING STP AGAINST ATTACKS USING THE ROOT GUARD MECHANISM ON ACCESS/DISTRIBUTION LAYER SWITCHES

M. A. Rufin, M. V. Vasiliev

The article examines the problem of protecting the data link layer of a corporate network against attacks aimed at spoofing the root bridge in STP and RSTP protocols. The relevance of the study is determined by the fact that, without…

PDF

IMPACT OF MAC-FLOODING ATTACKS ON L2 SWITCHES IN A HYBRID NETWORK INFRASTRUCTURE

E. A. Eremina, A. N. Prostova

The conducted research reveals the critical vulnerability of L3 devices in hybrid networks during attacks at the channel level. It has been experimentally shown that a classic MAC flooding attack aimed at overflowing the CAM tables of…

PDF

STP SECURITY ISSUES: TCN DOS (TOPOLOGY CHANGE NOTIFICATION)

I. V. Islibaev, U. A. Proshenko

Abstract. The article examines the security issues of the Spanning Tree Protocol (STP) in the context of Topology Change Notification Denial of Service (TCN DoS) attacks aimed at disrupting the stability of Ethernet networks. The…

PDF

AUTOMATED SOFTWARE DEPLOYMENT TOOLS IN WINDOWS INFRASTRUCTURE. SECURITY ISSUES

A. A. Kyazimov, A. A. Tereshonok

This article presents an in-depth security analysis of the built-in Group Policy Software Installation (GPSI) mechanism used for centralized software deployment in Windows Active Directory environments. The research focuses on the…

PDF

LARGE LANGUAGE MODELS IN PENETRATION TESTING AUTOMATION: CURRENT STATE, LIMITATIONS AND PROSPECTS FOR APPLICATION IN PROFESSIONAL TRAINING OF INFORMATION SECURITY SPECIALISTS

V. S. Grekov

The article analyzes the current state of research on the application of large language models (LLMs) for penetration testing automation. The reasons for the rapid growth of interest in this area are examined, driven by the increasing…

PDF

EXPERIENCE OF TEACHING PRODUCT-BASED COURSES IN SIEM AND NAD IN THE LOGIC OF INTEGRATED CAREER GUIDANCE: FROM THE FIRST YEAR OF SPECIALIST DEGREE PROGRAMMES TO THE CERTIFICATION OF GRADUATES IN THE EXTENDED GROUP 10.00.00

A. G. Uymin, V. S. Grekov

The paper presents the experience of implementing vendor product-based courses by Positive Technologies — PT-SIEM-CS (Certified Specialist in MaxPatrol SIEM) and PT-NAD-CS (Certified Specialist in PT Network Attack Discovery) — within a…

PDF

EXPERIMENTAL VERIFICATION OF OSPFV3 RFC 8362 EXTENSIONS SUPPORT ON THE ECOROUTEROS PLATFORM

M. A. Olshevskaya

The article presents the results of an experimental study of the OSPFv3 protocol implementation in the domestic routing platform EcoRouterOS Rose version 3.2.6.2.22240-develop-f748b4f-2025.01.14 with respect to compliance with the…

PDF

License

Creative Commons Attribution (CC BY) 4.0