ARP spoofing forensics based on network data flow

Lin Zhu; Binglong Li D.D.S.; Heyu Zhang

doi:10.1117/12.2659380

28 October 2022 ARP spoofing forensics based on network data flow

Lin Zhu, Binglong Li D.D.S., Heyu Zhang

Proceedings Volume 12453, Third International Conference on Computer Communication and Network Security (CCNS 2022); 1245307 (2022) https://doi.org/10.1117/12.2659380
Event: Third International Conference on Computer Communication and Network Security (CCNS 2022), 2022, Hohhot, China

Abstract

Among the many network protocols, the protocol responsible for obtaining the Mac address based on the IP address is called the Address Resolution Protocol (ARP). Since the ARP protocol is a stateless protocol and lacks an authentication mechanism for the data source of the request/response signal, any client can forge malicious ARP packets to poison the ARP cache table of the target host. Attacks based on ARP spoofing are very harmful, and will lead to reduced network transmission efficiency, network congestion, and even user information theft and privacy leakage. This paper uses wireshark software to view network traffic, and analyzes the implementation principles and characteristics of man-in-the-middle attacks (MITM), denial of service attacks (DoS), and MAC flooding based on ARP spoofing. A forensic method for ARP spoofing attack based on network data flow analysis is proposed.

Citation Download Citation

Lin Zhu, Binglong Li D.D.S., and Heyu Zhang "ARP spoofing forensics based on network data flow", Proc. SPIE 12453, Third International Conference on Computer Communication and Network Security (CCNS 2022), 1245307 (28 October 2022); https://doi.org/10.1117/12.2659380

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available