An Active Host-Based Intrusion Detection System for ARP-Related Attacks and its Verification

@article{Barbhuiya2011AnAH,
  title={An Active Host-Based Intrusion Detection System for ARP-Related Attacks and its Verification},
  author={Ferdous A. Barbhuiya and Santosh Biswas and Sukumar Nandi},
  journal={CoRR},
  year={2011},
  volume={abs/1306.1332}
}
Spoofing with falsified IP-MAC pair is the first step in most of the LAN based-attacks. Address Resolution Protocol (ARP) is stateless, which is the main cause that makes spoofing possible. Several network level and host level mechanisms have been proposed to detect and mitigate ARP spoofing but each of them has their own drawback. In this paper we propose a Host-based Intrusion Detection system for LAN attacks, which works without any extra constraint like static IP-MAC, modifying ARP etc. The… CONTINUE READING