Provably curb man-in-the-middle attack-based ARP spoofing in a local network

Abstract

Even today, internet users’ data security remains a significant concern. One problem is ARP poisoning, otherwise referred to as ARP spoofing. Such attacks are intended to exploit the identified ARP protocol vulnerability. Despite no straightforward remedy for ARP spoofing being apparent, certain actions may be taken to maintain one’s safety. The most basic and common defence against a poisoning attack is manually adding MAC and IP addresses to the static ARP cache table. However, this solution is ineffective for large networks where static entries require considerable time and effort to maintain, whether by human input or via special tools and settings for the static entries of network devices. Accordingly, this paper aimed to monitor network packet information and detect the behaviour of ARP poison attacks on operating systems, for instance Windows and Linux. The discovery and defence policy systematically and periodically check the MAC addresses in the ARP table, enabling alerts to be issued if a duplicate entry is detected. This enables the poison-IP address to be blocked before a reply is sent. Finally, the results showed that the superiority was successfully achieved in the detection, prevention and reporting mechanisms in the real-world environment.

A lightweight and secure multilayer authentication scheme for wireless body area networks in healthcare system

“… ISSN: 2088-8708 − Attack resistance: Any malicious attack like the man-in-the-middle (MITM) attack [46], impersonation attack, insider attack, and replay attack is possible if a CK adversary finds a method to carry out the attack. For an impersonation attack related to mutual authentication, the attacker should learn the firstfactor message (𝐻′, 𝑇) and confirmation code (𝐶𝐶) to masquerade as 𝑃 𝑖 and 𝐻𝐶𝐶 respectively.…”

“…After reviewing the security challenges using the CK model, we compare our proposed system with similar works as shown in Table 2. 9𝑇 ℎ + 2𝑇 𝑏𝑝 + 2𝑇 𝑠𝑦𝑚 + 5𝑇 𝑒𝑐𝑐 51.51 [35] 14𝑇 ℎ + 2𝑇 𝑠𝑦𝑚 + 4𝑇 𝑒𝑐𝑐 18.64 [38] 11𝑇 ℎ 0.88 [39] 10𝑇 ℎ 0.8 [40] 10𝑇 ℎ 0.8 [46] 14𝑇 ℎ 1.12 Proposed 2𝑇 𝑆𝑖𝑔𝑛 +2𝑇 𝑉𝑒𝑟𝑖𝑓𝑦 0.35…”

Role Based Access Control Using Biometric the in Educational System

“…In this type of attack, an adversary is intended to be able to intercept messages transferred between users and the server. When the user signs out of the server, he then utilizes this message [25]. The factors are delivered to the service provider securely encrypted in our suggested approach.…”