Prevention of ARP spoofing: A probe packet based technique

Pandey, Poonam

doi:10.1109/iadcc.2013.6514211

Cited by 28 publications

(9 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Even entries that have not expired are rewritten whenever an ARP reply packet arrives. A host has no means of authenticating an ARP protocol packet"s source [25]. Two simple spoofing techniques may be used that exploit this vulnerability in the ARP protocol:…”

Section: Arp Cache Poisoning and Spoofing Attackmentioning

confidence: 99%

Provably curb man-in-the-middle attack-based ARP spoofing in a local network

Nasser

Hussain

2022

Bulletin EEI

View full text Add to dashboard Cite

Even today, internet users’ data security remains a significant concern. One problem is ARP poisoning, otherwise referred to as ARP spoofing. Such attacks are intended to exploit the identified ARP protocol vulnerability. Despite no straightforward remedy for ARP spoofing being apparent, certain actions may be taken to maintain one’s safety. The most basic and common defence against a poisoning attack is manually adding MAC and IP addresses to the static ARP cache table. However, this solution is ineffective for large networks where static entries require considerable time and effort to maintain, whether by human input or via special tools and settings for the static entries of network devices. Accordingly, this paper aimed to monitor network packet information and detect the behaviour of ARP poison attacks on operating systems, for instance Windows and Linux. The discovery and defence policy systematically and periodically check the MAC addresses in the ARP table, enabling alerts to be issued if a duplicate entry is detected. This enables the poison-IP address to be blocked before a reply is sent. Finally, the results showed that the superiority was successfully achieved in the detection, prevention and reporting mechanisms in the real-world environment.

show abstract

Section: Arp Cache Poisoning and Spoofing Attackmentioning

confidence: 99%

Provably curb man-in-the-middle attack-based ARP spoofing in a local network

Nasser

Hussain

2022

Bulletin EEI

View full text Add to dashboard Cite

show abstract

“…A Probe packet based technique with enhanced spoof detection engine was used by Poonam Pandey to prevent the ARP cache poisoning attacks [13]. It uses the verifier table and handler algorithm to detect the attacker.…”

Section: Introductionmentioning

confidence: 99%

Lattice Structural Analysis on Sniffing to Denial of Service Attacks

Prabadevi¹,

Jeyanthi²,

Udzir³

et al. 2019

IJCNC

View full text Add to dashboard Cite

Sniffing is one of the most prominent causes for most of the attacks in the digitized computing environment. Through various packet analyzers or sniffers available free of cost, the network packets can be captured and analyzed. The sensitive information of the victim like user credentials, passwords, a PIN which is of more considerable interest to the assailants' can be stolen through sniffers. This is the primary reason for most of the variations of DDoS attacks in the network from a variety of its catalog of attacks. An effective and trusted framework for detecting and preventing these sniffing has greater significance in today's computing. A counter hack method to avoid data theft is to encrypt sensitive information. This paper provides an analysis of the most prominent sniffing attacks. Moreover, this is one of the most important strides to guarantee system security. Also, a Lattice structure has been derived to prove that sniffing is the prominent activity for DoS or DDoS attacks.

show abstract

“…ARP spoofing is a type of attack and it is a major problem in the local area network (LAN) and can lead to many other attacks , , , . ARP spoofing is a malicious attack that sends falsified ARP messages over a LAN that leads to associated linking of an attacker's MAC address with the IP address of a legitimate computer or server on the network.…”

Section: Introductionmentioning

confidence: 99%

Address resolution protocol spoofing attacks and security approaches: A survey

Hijazi

Obaidat

2018

Security and Privacy

View full text Add to dashboard Cite

Address resolution protocol (ARP) is a very popular communication protocol in the local area network (LAN), working under the network layer, as per the open systems interconnection (OSI) model. It is used to associate Internet protocol (IP) address to medium access control (MAC) address; hence, the IP‐MAC addresses are stored in ARP cache of any network host. ARP has weakness in authentication that an attacker can exploit to gain unauthorized access to one's sensitive data. There are some approaches that can be used against ARP spoofing attacks. These provide an efficient and secure way to mitigate ARP attacks and detect ARP poisoning that can reduce the attack. This paper will discuss: various effective approaches, security issues in ARP spoofing, and poisoning attacks.

show abstract

Prevention of ARP spoofing: A probe packet based technique

Cited by 28 publications

References 6 publications

Provably curb man-in-the-middle attack-based ARP spoofing in a local network

Provably curb man-in-the-middle attack-based ARP spoofing in a local network

Lattice Structural Analysis on Sniffing to Denial of Service Attacks

Address resolution protocol spoofing attacks and security approaches: A survey

Contact Info

Product

Resources

About