Ghost Frames

Every modern security book jumps straight to IP and TCP. Almost none of them cover the layer beneath — the Data Link Layer, where ARP spoofing, VLAN hopping, MAC flooding, and STP manipulation happen before any higher-layer defense can fire. Ghost Frames is the first complete reference on Layer 2 attacks and the defenses that actually stop them.