ARP spoofing has great damage to the security of LANs (Local Area Networks), and therefore a feasible solution becomes very important. Many schemes have previously been proposed to deal with such issue. Some schemes have to replace LAN switches or modify firmware. In addition, some have to change the ARP (Address Resolution Protocol) protocol, combine with SNMP (Simple Network Management Protocol) protocol or set up one or more monitoring servers. In this paper, we propose a simple and effective scheme by using WBEM (Web-based Enterprise Management) technology namely WBEM-ARP. This solution efficiently detects and blocks ARP spoofing in the LAN. WBEM server works as an intermediary role which makes the network information be transmitted in an efficient manner and performs defense capabilities on ARP spoofing with network management. WBEM is a popular technology because it can integrate with different hardware, protocols, operating systems, and distributed environments. In a word, this proposed WBEM-ARP scheme not only works efficiently but also can be easily applied to existing systems.
展开▼
