Title :
The detection and prevention for ARP Spoofing based on Snort
Author :
Hou, Xiangning ; Jiang, Zhiping ; Tian, Xinli
Author_Institution :
Dept. of Comput. Sci., Cheng du Univ. of Technol., Le shan, China
Abstract :
As one of powerful and light weight Network Intrusion Detection System, Snort has good expansibility and transplantability, and can be used in various environments. However, Snort has clear deficiency on ARP spoofing detection, and its own ARP spoofing defense is powerless. To realize the detection and prevention of the ARP spoofing, the paper expanded the snort preprocessor plug-ins by adding an ARP detection module. Results shows this way can make Snort sniffer itself has immunity, and make locate the attacker more timely and accurately.
Keywords :
computer network security; protocols; ARP spoofing defense; ARP spoofing detection; address resolution protocol; network intrusion detection system; snort; IP networks; Logic gates; ARP; ARP spoofing; Snort;
Conference_Titel :
Computer Application and System Modeling (ICCASM), 2010 International Conference on
Conference_Location :
Taiyuan
Print_ISBN :
978-1-4244-7235-2
Electronic_ISBN :
978-1-4244-7237-6
DOI :
10.1109/ICCASM.2010.5619113