Preventing ARP Attacks Using a Fuzzy-Based Stateful ARP Cache

— ARP cache poisoning is considered to be one of the easiest and dangerous attacks in local area networks. This paper proposes a solution to the ARP poisoning problem by extending the current ARP protocol implementation. Instead of the traditional stateless ARP cache, we use a stateful ARP cache in order to manage and secure the ARP cache. We also use a novel Fuzzy Logic approach to differentiate between normal and malicious ARP replies. The Fuzzy Logic controller uses a dynamically populated data base that adapts to network changes. The limits of the current approaches are discussed and analyzed.

• Type: Conference
• Year: 2007
• Where: ICC
• Authors: Zouheir Trabelsi, Wasim El-Hajj
• Keywords: ARP Cache, ARP Cache Poisoning, Communications, ICC 2007, Stateless Arp Cache