SM-ARP: Stochastic Markovian Game Model for Packet Forwarding Based ARP Spoofing Attacks Detection
C. Divya1, D Francis Xavier Christopher2
1C. Divya , Research Scholar, School of Computer Studies, Rathnavel Subramaniam College of Arts and Science, Coimbatore, Tamilnadu.
2Dr D Francis Xavier Christopher, Director, School of Computer Studies, Rathnavel Subramaniam College of Arts and Science, Coimbatore, Tamilnadu.
Manuscript received on November 30, 2019. | Revised Manuscript received on December 08, 2019. | Manuscript published on December 30, 2019. | PP: 2310-2318 | Volume-9 Issue-2, December, 2019. | Retrieval Number: B3801129219/2019©BEIESP | DOI: 10.35940/ijeat.B3801.129219
Open Access | Ethics and Policies | Cite | Mendeley
© The Authors. Blue Eyes Intelligence Engineering and Sciences Publication (BEIESP). This is an open access article under the CC BY-NC-ND license (http://creativecommons.org/licenses/by-nc-nd/4.0/)
Abstract: Address Resolution Protocol (ARP) spoofing attacks have become the most pivotal attacks in deteriorating the performance of computer networks. The objective of this paper is to develop SM-ARP, Stochastic Markovian game model based ARP spoofing attack detection scheme.Although many recent techniques have been developed to detect and protect against ARP spoofing attacks, the practical challenges has led to ineffective utilization. The major challenge is that the attackers employing ARP spoofing tend to alter the attack strategy at each point and increases the difficulty in detection and security implementations. The packet forwarding relaying is one suchattack strategy which is harder to detect using traditionally proven methodologies. This paper tackles the packet forwarding relay strategy based ARP spoofing attack strategy by using the proposed SM-ARPto eliminate the attack in a practically feasible manner. The proposed model utilizes a stationary Markov model for optimizing the packet forwarding behaviour of the networks. When an ARP spoofing attack is initiated, the SM-ARP model tracks the changes in the packet forwarding patterns through cache table and detects the misbehaviours. As a security measure, these misbehaved nodes are entitled to recovery and repair process to restore the network to stabilized state. Experiments are conducted to evaluate the performance of SM-ARP in an application for student marks management system. The results prove that the proposed SM-ARP model improves the detection of ARP spoofing attacks with accuracy of 88.2% and also reduces the complexity and errors.
Keywords: Address Resolution Protocol, ARP spoofing detection, cache poisoning, Stochastic Markovian game model, packet forwarding relay strategy, stationary Markov model, students marks management.