Efficient Mechanism for Securing Software Defined Network Against Arp Spoofing Attack

Abstract

Software Defined Network SDN is a new emerging paradigm of networking which decouples the data plane and the control plane. It is expected to be a solution to overcome the limitations of traditional networks. Conventional networks had several security problems, some of them disappeared by SDN and some others still exist such as Address Resolution Protocol ARP spoofing. This paper discusses the attacks of ARP spoofing and presents a deep study on the existing solutions either in traditional or SDN environments. A light, reliable, fast and effective mechanism has been proposed to prevent ARP spoofing, without any additional software or hardware by utilising SDN capabilities. In this work, the SDN controller has been extended by a module which checks every ARP packet in network to detect possible spoofed packets and stop them. Experiments were conducted on the simulated environment using Mininet to check the functionality of the proposed mechanism. The simulation results showed that the proposed mechanism is robust against ARP spoofing attack.

Comparison of Software Defined Networking with Traditional Networking

“…The reference [87] found that by using the MCBLB algorithm in the SDN network, the load balancing is increased by up to 14 %. The authors [5] discussed how to prevent ARP spoofing without using any additional hardware and software but only by extending the SDN controller by a module. The results of the simulation showed that the suggested mechanism is stable against the attack of ARP spoofing.…”

“…The optimal location of SDN controllers, switches, and other devices is an open challenge in SDN, which affects overall network security and performance [73,74]. Its integration is another security problem because of the design of SDN as it is flat, Where monitoring systems and defense solutions need to be compliant to improve overall performance, energy savings, and network security [5,75]. Fig.…”

“…The results revealed that the proposed algorithm could raise the load balance by up to 14% relative to the latest work. Y. I. Khalid, M. Ismael and Baheej Al-Khalil [5] showed that there are many security challenges in traditional networks, some of them ended by SDN and some others remain, like Address Resolution Protocol (ARP) spoofing. The author discussed the solution to prevent ARP spoofing without using any additional hardware and software but only by extending the SDN controller by a module, this scans each ARP packet in the network to identify and avoid potentially spoofed packets.…”

“…The results showed an increase in load balancing by up to 14 %. MATLAB [5] 2019 To prevent SDN Network against Address Resolution Protocol ARP spoofing Attack…”

“…SDN proposes to concentrate network intelligence on a single network component by distinguishing the data packet forwarding mechanism (data plane) from the routing process (control plane), as seen in Fig. 1 [5][6][7] complicated and facilitates to make and introduce new concepts in networking through breaking the issue of the network control into tractable parts, simplifies the network management and facilitate elopment of the network. In this paper, the SDN is reviewed; it introduces SDN, explaining it varies from traditional networking, and its architecture principles.…”