"LAN Switch Security: What Hackers Know About Your Switches" by Eric Vyncke & Christopher Paggen.
A friend of mine recalled the title from when we were choosing the latest book for the book club which I help run for the Braking Down Security Podcast [sic]. He said Paul Cogins gave it a nice "shout out" at BSides Huntsville in his router security class a few months ago.
This is part of the Cisco CCIE books series, but reads very smoothly. It is very well written, not like a certification manual (those are also fun to read, don't get me wrong!)
When was the last time you brushed up on Layer 2? An attacker could easily gain access to this layer physically, or once already in the network, and cause all sorts of issues, so don't discount it. The first things you might mention like ARP spoofing or switch flooding, are only the beginning.
Within a skim of the contents, and a few pages, the authors combat several myths about "port security" and also Vlans, which immediately drew me in to reading a complete chapter at the first sitting. They even give lab-style attack examples for most of the chapters, so it can be a very hands-on read as well; which we all know is what is needed to truly learn things.
This will evolve later into a book review, and as well I will add a few more links, above; so check back here if you're interested.
or check it out yourself at your local library, or below:
Here are just the first couple links that come to mind.
Buy on Amazon
https://www.amazon.com/LAN-Switch-Security-Hackers-Switches/dp/1587052563/
Read it on Safari Books online
https://www.safaribooksonline.com/library/view/lan-switch-security/9781587052569/pr05.html
