TY - GEN
T1 - Towards more sophisticated ARP spoofing detection/prevention systems in LAN networks
AU - Al-Hemairy, Mohamed
AU - Amin, Saad
AU - Trabelsi, Zouheir
PY - 2009/12/1
Y1 - 2009/12/1
N2 - The Address Resolution Protocol (ARP) is used by computers to map network addresses (IP) to physical addresses [MAC] and we can't imagine a communications between networks without the support of ARP protocol. However, ARP had been misused by many malicious hosts for illegitimate penetration; ARP Spoofing is one example for such illegal access. ARP Spoofing can enable malicious hosts to perform Man-in-the-Middle attacks [MiM] as well as a Denial of Service attacks [DoS]. Unfortunately, ARP Spoofing has not been focused by security experts or solutions, e.g, Intrusion Detection Systems or Intrusion Protection Systems [IDS/IPS]. In this research we evaluate the most famous & expensive detection and prevention [IDS/IPS] systems for detecting all types of ARP spoofing attacks and introduce an algorithm which can be implemented in IDS/IPS systems to enhance it's security.
AB - The Address Resolution Protocol (ARP) is used by computers to map network addresses (IP) to physical addresses [MAC] and we can't imagine a communications between networks without the support of ARP protocol. However, ARP had been misused by many malicious hosts for illegitimate penetration; ARP Spoofing is one example for such illegal access. ARP Spoofing can enable malicious hosts to perform Man-in-the-Middle attacks [MiM] as well as a Denial of Service attacks [DoS]. Unfortunately, ARP Spoofing has not been focused by security experts or solutions, e.g, Intrusion Detection Systems or Intrusion Protection Systems [IDS/IPS]. In this research we evaluate the most famous & expensive detection and prevention [IDS/IPS] systems for detecting all types of ARP spoofing attacks and introduce an algorithm which can be implemented in IDS/IPS systems to enhance it's security.
UR - http://www.scopus.com/inward/record.url?scp=77951128717&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=77951128717&partnerID=8YFLogxK
U2 - 10.1109/CTIT.2009.5423112
DO - 10.1109/CTIT.2009.5423112
M3 - Conference contribution
AN - SCOPUS:77951128717
SN - 9781424457557
T3 - Proceedings of the 2009 International Conference on the Current Trends in Information Technology, CTIT 2009
SP - 225
EP - 230
BT - Proceedings of the 2009 International Conference on the Current Trends in Information Technology, CTIT 2009
T2 - 2009 International Conference on the Current Trends in Information Technology, CTIT 2009
Y2 - 15 December 2009 through 16 December 2009
ER -