Abstract:Address Resolution Protocol (ARP) spoofing has been a long-standing problem with no clear remedy until now. The attacks can be launched easily utilizing an enormous number of publicly available tools on the web; however, they are extremely tough to counterattack due to ARP's stateless nature for not authenticating ARP replies for a subsequent request. Previous studies have demonstrated significant efforts to counterattack these assaults in Software-Defined Networks (SDN); however, much effort has been focused solely on detecting the assaults, with little effort being made to address performance bottlenecks, scalability, and Single Point of Failure (SPOF) issues in large-scale networks. In this study, we focus on developing ARP spoofing attacks detection mechanism in large-scale SDN that is immune to SPOF and provides enhanced network performance and scalability. The main purpose is to enable controllers to intercept and analyze all incoming ARP packets, learn address mappings, and store them in the application's memory to be used as a basis for ongoing ARP cache comparisons while maintaining a global cache in a controller. To achieve the goal of this study, a simulation experiment in a closed network environment was undertaken to precisely monitor network traffic and result patterns. Mininet and the Open Network Operating System were used to implement the data plane and OpenFlow controllers. The results show that, the proposed solution is resistant to ARP spoofing attacks, with an average detection and mitigation time of 4.3 and 26.19 milliseconds, respectively. Further significant improvements have been observed in alleviating SPOF and performance bottlenecks.

Review Of Security Research On Address Resolution Protocols

Research on Preventing ARP Attack Based on Computer Network Security

Improved Secure Address Resolution Protocol

Secure ARP and Secure DHCP Protocols to Mitigate Security Attacks

Review of Internet Inter-Domain IP Source Address Validation Technology

Study on BGP Security

A Review: An Efficient and Reliable Secure Routing Mechanism with the Prevention of Attacks in Mobile Ad-Hoc Network (MANET)

Efficient and Secure Routing Approach for Ad Hoc Network

Principle analysis and prevention of ARP attack based on local area network

A Lightweight and Attack Resistant Authenticated Routing Protocol for Mobile Adhoc Networks

A Novel Mechanism for Detection of Address Resolution Protocol Spoofing Attacks in Large-Scale Software-Defined Networks

Overview of ARP Spoofing Detection and Prevention Techniques

A Secure Multipath Routing Protocol In Mobile Ad Hoc Networks

Secure Name Resolution for Identifier-to-Locator Mappings in the Global Internet

ARP Virus Attacks Simulation and Preventive Measures

Research on Security of Routing Protocol in Mobile Ad Hoc Networks

Resource Public Key Infrastructure RPKI: Status and Problems

The Research on Security Architecture for Active Networks and Security Mechanism for Active Nodes

Study on Separated Address Space Technology for the Scalable Routing Architecture

Detecting and Mitigating ARP Attacks in SDN-Based Cloud Environment

A Framework and It's Application for Security Architecture of Computer Networks