NDLI: Automatic attack detection and correction system development

Content Provider	IEEE Xplore Digital Library
Author	Sanguankotchakorn, T. Dechasawatwong, T.
Copyright Year	2011
Description	Author affiliation: Telecommunications Field of Study, School of Engineering and Technology, Asian Institute of Technology, Thailand (Sanguankotchakorn, T.; Dechasawatwong, T.)
Abstract	Recently, there are increasingly numerous hacking techniques which are used to compromise the computer systems. One popular hacking technique is called Man-in-the-Middle attack [1]. This technique uses the weakness of ARP protocol [5] namely “ARP spoofing” to damage the users on both confidentiality and privacy issues. It does not only steal the sensitive information, but also leads to the collapse of the network communications. The current methods to secure the users are mainly only passive detections; for example, to monitor invalid MAC to IP addresses mappings, and give the alerts to the administrators. The main disadvantages of this method are the time lag between learning and detecting spoofing. Moreover, it does neither correct spoofing automatically, nor does it not resolve at the root of problems (the attacker's host). In this work, we propose the algorithm called “SmartARP” to detect and correct the ARP spoofing attack. The algorithm works as follows: the constructed ARP-Request and TCP SYN packets are sent to the network to verify the inconsistencies. When the algorithm detects ARP spoofing, it will send the correct ARP packets to the victim's hosts to correct their ARP caches automatically. In addition, the invalid ARP-Reply packets will be sent to update the attacker's host to deny it. We measure the performance of our proposed techniques using various evaluation metrics such as Response time, Correction time, the Successful Correction ratio, CPU Usage and Network Utilization. It can be shown that our proposed techniques are fast, intelligent, scalable and reliable in detecting and correcting attacks.
Starting Page	1
Ending Page	8
File Size	553085
Page Count	8
File Format	PDF
ISBN	9781457716683
e-ISBN	9781457716706
DOI	10.1109/APNOMS.2011.6077028
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2011-09-21
Publisher Place	Taiwan
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Computers ARP protocol Protocols Databases TCP/IP Software IP networks Time factors Computer crime ARP spoofing attack ARP spoofing
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in