Design of Win Pcap Based ARP Spoofing Defense System

Abstract

This paper focuses on ARP attacks in switched networks, from ARP protocol perspective, analyses the principle of ARP attacks and the exceptional interrupt occurs they cause when the terminal users access the servers. To quickly and effectively detect ARP spoofing, this paper proposes a WinP cap based detection system of ARP spoofing. Using Win Pcap driver development monitoring software, implements ARP packets capture and analysis in a switched network inspection system. This method does not require a network host to do anything in response, comparing to the other methods, it can reduce the impact of network communication during inspection, and can detect the ARP Spoofing quickly and effectively in switched network.