Abstract:The Address Resolution Protocol (ARP) spoofing is a form of attack typically used by attackers to cause a denial of service or man-in-the-middle attacks. This attack comes from ARP weaknesses and aims to compromise victims' ARP caches by sending ARP packets containing fake IP-MAC pairs. To overcome ARP spoofing attacks, several approaches leverage the advantages of software-defined networking (SDN) to detect malicious users in the network. To achieve their goal, the SDN controller consecutively checks the characteristics of each ARP packet to ensure its correctness. However, this verification method can lead to latency and congestion at the controller level or render the system unusable for large-scale networks. To address this drawback, we propose a game-theoretic approach to provide an optimal verification method that considers the intelligent attackers' decision-making process during an ARP cache poisoning attempt. This approach is a zero-sum game between the attacker who wants to poison the victims' ARP caches and the defender who must avoid this poisoning. The game model results in mixed-strategy Nash equilibria that identify optimal verification methods to prevent control plane latency and congestion during attacker detection. The results show that an intelligent attacker will refrain from poisoning ARP caches with a high-impact strategy because the defender frequently checks such a strategy. In addition, the attacker's penalty value can deter both rational and irrational attackers from poisoning ARP caches. Simulations in the Mininet simulator have shown that the proposed approach can significantly mitigate control plane latency and congestion during the attacker's characteristic checking.

Principle analysis and prevention of ARP attack based on local area network

Research of the ARP Spoofing Principle and a Defensive Algorithm

Research on Preventing ARP Attack Based on Computer Network Security

Study on ARP Spoofing Attack Detection and Defense Technology

ARP Spoofing Detection and Guarding Algorithm

Overview of ARP Spoofing Detection and Prevention Techniques

ARP Virus Attacks Simulation and Preventive Measures

Research on ARP Spoof Detection Strategies in Unreliable LAN.

An Improved Algorithm of ARP Protocol for Protection and Check

D-ARP: An Efficient Scheme to Detect and Prevent ARP Spoofing

Port Scanning Techniques and Analysis of Attack and Defense

DESIGNING AND IMPLEMENTING ARP SPOOFING DETECTING SYSTEM BASED ON SNMP PROTOCOL

A Client/Server Based Mechanism to Prevent ARP Spoofing Attacks

Countering ARP Spoofing Attacks in Software-Defined Networks using a Game-Theoretic Approach

Detecting and Mitigating ARP Attacks in SDN-Based Cloud Environment

Reaching on Redirection Technology Based on ARP and DNS Spoofing

A Novel Mechanism for Detection of Address Resolution Protocol Spoofing Attacks in Large-Scale Software-Defined Networks

A Method of ARP Spoofing of Trojan Horse Virus Auto-Orientation Based on Protocol Analysis

Secure ARP and Secure DHCP Protocols to Mitigate Security Attacks

The Security Analysis and Detection of 802. 1X Wireless Local Area Network

Preventing ARP Spoofing Attacks Through Gratuitous Decision Packet