A Survey on Various Prevention mechanism for ARP poisoning against MITM attack
Dhrruv Chaudhary, Jahnavi Vithalpura · Zenodo (CERN European Organization for Nuclear Research) · 2017
The address resolution protocol (ARP) is a protocol that is used by the IP. The ARP works inside the switches and is used for mapping of the IP address and MAC address. ARP works properly but it is a stateless protocol therefore it can be easily attacked. That because hacker can perform MITM on the network and easily still the information which is communicate between two hosts of network. Our project provides a lightweight approach for detecting such attacks is to use Snort. Snort is intrusion detection system (IDS). It will alert us on attack and will use the Open source interface to get the IP address of the attacker/hacker and for preventing we will block it by scripting based on python programing language. After blocking IP of hackers he will not capable to perform MITM on the network again and provide accurate result.