DP-Spoof: Detection and Prevention of ARP Spoofing Using Dynamic Port and State Allocation

Providing a secure internet for dedicated users sharing a communication link has become critical. Sending false ARP messages to redirect network traffic is known as ARP poisoning. Security modules in software-defined networks (SDN) deflect this threat by monitoring and validating ARP exchanges in real-time. SDN deploys a controller, which can be a Pox controller, a Ryu controller, or a Nox controller. The process starts with the arrival of an ARP request; then, the system checks if the port is static; if it is, the packet is discarded. The system checks if a DHCP offer or acknowledgment has been received for dynamic ports. If the MAC address of the packet is already in the dynamic table, the system updates its state. Fixed value assignment for states may make it easier for attackers to drudge the network. An attacker may also approach with multiple arrival requests to verify himself as a legitimate host. So, the arrival request should be rejected if the DHCP packet arrives more than a specific number of times. Moreover, our framework's essential contribution affirms secured ARP with nominal involvement by network operators while assisting static and dynamic port allotment, demanding no changes to the current network topology or protocols and no additional software installation.