Bank of America Corporation
Device spoofing detection using MAC authentication bypass endpoint database access control

Abstract:

An information security system that includes a switch operably coupled to a device. The switch includes a plurality of ports configured to provide network connectivity for one or more endpoint devices to a network. The device is configured to receive device information for an endpoint device connected to a port of the switch, to identify a MAC address in the device information table that matches the MAC address for the endpoint device, and to identify a device type for the identified MAC address in the device information table. The device is further configured to determine that the device type for the endpoint device does not match the device type for the identified MAC address in the device information table and to set a port status for the port to blocked in response to determining that the device types do not match.