Constructing an ARP attack detection system with SNMP traffic data mining

Abstract

With the prevalent of Internet, network security plays a very important role as an infrastructural foundation to establish a successful e-Commerce environment. Especially when the Internet transmission technique progresses, network attack becomes prevalent and threaten to Internet users than ever before. While many kinds of network intrusion techniques and sniffing tools are generated, ARP (Address Resolution Protocol) spoofing is one of the serious network attacks. The ARP spoofing attack seizes the defect of protocol design cheating the victims to hijack the transformation package to sniff the important information or embedding some malicious software to those victim hosts.