Detection And Prevention of ARP Attack in Software Defined Networks
Sunil Gowda S, R B Dayananda · 2023
Software-defined networking (SDN) offers community directors flexibility, programmability, and centralized control. However, it also brings new security demanding situations, such as ARP spoofing attacks, that may compromise community safety and disrupt network offerings. In this paper, we endorse a method to hit upon and mitigate ARP spoofing assaults in SDN networks using RYU controllers. Our solution is based on the ryu utility, which inspects ARP packets and detects ARP spoofing assaults by way of comparing the sender's MAC and IP address with with a formerly discovered mapping. If a spoofing assault is detected, the RYU controller drops packets from the attacker's Mac address. We implement our answer using the Open Flow protocol and test it on a experimental switch topology with 4 hosts. Our experimental outcomes show that our solution is powerful in detecting and mitigating ARP spoofing assaults inside the network. Furthermore, the solution is lightweight and does no longer introduce massive overhead to the network. We agree with our solution may be incorporated into current SDN networks to enhance their security posture and prevent ARP attack.