The Defense Against ARP Spoofing Attack Using Semi-Static ARP Cache Table
The Defense Against ARP Spoofing Attack Using Semi-Static ARP Cache Table
复制标题
利用半静态ARP缓存表防御ARP欺骗攻击
DOI：
--
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
Mahendra Data
中科院分区：
文献类型：
--
作者：
Mahendra Data
直到今天，保护通过互联网传输的用户数据的安全仍然是一个非常重要的挑战。其中一种威胁是对数据链路层的攻击，例如ARP欺骗。这些攻击利用了 ARP 协议的漏洞。缓解此类攻击的最基本但有效的解决方案之一是手动将 MAC 和 IP 地址添加到静态 ARP 缓存表中。然而，这种解决方案是一项费力的工作，并不是所有的网络管理员都愿意这样做。本研究提出了一种改进静态ARP缓存表解决方案的方法。我们的目的是消除手动添加静态ARP缓存表的繁琐过程，并添加ARP验证功能来自动管理静态ARP缓存表。该方法简单且与标准ARP协议兼容。它不需要对标准 ARP 协议进行任何修改，也不需要更换旧设备。我们成功地证明了我们提出的方法的有效性。我们提出的方法可以保护主机免受所有类型的 ARP 欺骗攻击。
Securing the user’s data that pass through the internet is a very important challenge until today. One of the threats is the attacks on the data link layer such as ARP spoofing. Those attacks exploit the vulnerability of the ARP protocol. One of the most basic but effective solution to mitigate this type of attack is adding MAC and IP address to the static ARP cache table manually. However, this solution is a laborious job and not all network administrator willing to do it. This research proposed a method to improve the static ARP cache table solution. Our purposes are removing the laborious process of adding the static ARP cache table manually and adding the ARP validation function to manage the static ARP cache table automatically. This proposed method is simple and compatible with standard ARP protocol. It does not require any modification of the standard ARP protocol nor replacing old devices. We successfully proved the effectiveness of our proposed method. Our proposed method can protect the hosts against all type of ARP spoofing attacks.