Abstract:Address Resolution Protocol (ARP) spoofing has been a long-standing problem with no clear remedy until now. The attacks can be launched easily utilizing an enormous number of publicly available tools on the web; however, they are extremely tough to counterattack due to ARP's stateless nature for not authenticating ARP replies for a subsequent request. Previous studies have demonstrated significant efforts to counterattack these assaults in Software-Defined Networks (SDN); however, much effort has been focused solely on detecting the assaults, with little effort being made to address performance bottlenecks, scalability, and Single Point of Failure (SPOF) issues in large-scale networks. In this study, we focus on developing ARP spoofing attacks detection mechanism in large-scale SDN that is immune to SPOF and provides enhanced network performance and scalability. The main purpose is to enable controllers to intercept and analyze all incoming ARP packets, learn address mappings, and store them in the application's memory to be used as a basis for ongoing ARP cache comparisons while maintaining a global cache in a controller. To achieve the goal of this study, a simulation experiment in a closed network environment was undertaken to precisely monitor network traffic and result patterns. Mininet and the Open Network Operating System were used to implement the data plane and OpenFlow controllers. The results show that, the proposed solution is resistant to ARP spoofing attacks, with an average detection and mitigation time of 4.3 and 26.19 milliseconds, respectively. Further significant improvements have been observed in alleviating SPOF and performance bottlenecks.

MASK:An Efficient Mechanism to Extend Inter-Domain IP Spoofing Preventions

Address Protection-as-a-Service An inter-AS Framework for IP Spoofing Resilience

Revisiting Inter-As IP Spoofing Let the Protection Drive Source Address Validation.

MASK: Practical Source and Path Verification Based on Multi-AS-Key.

Hiding and Trapping: A Deceptive Approach for Defending against Network Reconnaissance with Software-Defined Network

A Multi-fence Countermeasure Based Inter-domain Source Address Validation Method

A Two-Level Source Address Spoofing Prevention Based on Automatic Signature and Verification Mechanism

Toward Incentivizing Anti-Spoofing Deployment

Adaptive IP Mutation: A Proactive Approach for Defending against Worm Propagation

Preventing IP Source Address Spoofing: A Two-Level, State Machine-Based Method

On the Deployability of Inter-As Spoofing Defenses

Umbrella: A Routing Choice Feedback Based Distributed Inter-Domain Anti-Spoofing Solution

An Authentication Based Source Address Spoofing Prevention Method Deployed in IPv6 Edge Network

Towards a Cooperative Mechanism Based Distributed Source Address Filtering

A Method Based on AMHI for DDoS Attacks Detection and Defense

VASE: Filtering IP spoofing traffic with agility

LAS: An effective anti-spoofing method using existing information

A Distributed IP Spoof Detection System in Intranet

A Novel Mechanism for Detection of Address Resolution Protocol Spoofing Attacks in Large-Scale Software-Defined Networks

Enable a Trustworthy Network by Source Address Spoofing Prevention Routers: A Formal Description

A Backscatter Technology Based Study on Source Address Spoofing