Advanced approaches to prevent ARP attacks

Nowadays, there exist various types of Address Resolution Protocol(ARP)-based attacks, such as ARP flood attacks, ARP spoofing host attacks, attacks that spoof gateways, man-in-the-middle attacks and Internet Protocol(IP) address collision attacks. Focusing on the prevention to ARP spoofing, this paper first introduces S-ARP, a secure version of ARP utilizing asymmetric cryptography and focusing on message authentication rather than traffic confidentiality that aims to mitigate such attacks. It then talks about a modular approach based on multiple modules utilizing databases instead of focusing on ARP table cache to detect and mitigate ARP cache poisoning. At last the paper talks about an approach with Software Defined Network(SDN) to prevent cloud computing from being vulnerable to ARP poisoning. We then make some comparisons of these methods from three aspects in the comparison section and give the advantages of each method. In the end, these scenarios are summarized in the concluding section of the paper.