Premium
Modeling and performance analysis of a new secure address resolution protocol
Author(s) -
Younes Osama S.
Publication year - 2017
Publication title -
international journal of communication systems
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.344
H-Index - 49
eISSN - 1099-1131
pISSN - 1074-5351
DOI - 10.1002/dac.3433
Subject(s) - arp spoofing , address resolution protocol , computer science , man in the middle attack , stateless protocol , stateful firewall , computer network , spoofing attack , denial of service attack , computer security , mac address , authentication (law) , protocol (science) , ip address spoofing , host (biology) , authentication protocol , network address translation , internet protocol , the internet , network packet , medicine , ecology , alternative medicine , pathology , world wide web , biology
Summary Address Resolution Protocol (ARP) is an essential protocol for the operation of local area networks. It is used for mapping the logical address to the physical address. However, ARP was designed without any security features. Therefore, ARP is vulnerable to many ARP spoofing attacks, such as the host impersonation, man‐in‐the‐middle (MITM), and denial of service (DoS) attacks. Many techniques were introduced in the literature for mitigating ARP spoofing attack. However, they could not provide protection against the host impersonation and DoS attacks. This work introduces a new technique to secure address resolution protocol called ARP Authentication (ARP‐A). The proposed technique provides authentication for ARP messages and entities. In addition, it converts ARP from a stateless to a stateful protocol. To evaluate the performance of ARP‐A, it was implemented on Linux. To investigate the scalability of ARP‐A, a new analytical model was designed for it using stochastic reward nets. The results show that, compared with other related schemes introduced in the literature, ARP‐A is more efficient in terms of security and performance.