ARP cache poisoning: detection, mitigation and prevention schemes

Abstract

ARP is a network communication protocol employed for mapping a network address to a MAC address at the data link layer of the IP suite. However, the absence of authentication process in the ARP protocol allows vulnerabilities like ARP cache poisoning or ARP spoofing to take place. This allows malicious nodes to associate its MAC address with the IP address of host, and hence resulting in the exposure of network to several severe attacks like DoS, MITM, session hijacking and many more. There is no universally accepted benchmark scheme that reaches to the solution at fullest. This paper presents a comprehensive review of all those schemes along with their associated strengths and weaknesses. Also, a comparative evaluation of schemes is included in the paper for further insight into the development of improvised solutions to the above stated problem.