Re: Defending ARP Spoofing

From: Chris (chrismc911_at_hotmail.com)
Date: 11/11/05

  • Next message: Mark: "Re: Securing tcp data"
    Date: Fri, 11 Nov 2005 11:24:21 +0100
    
    

    >>>This is a process, which can be automated. Additionally, we're talking
    >>>about preventing ARP spoofing. This will not work, if one doesn't know,
    >>>which MAC address is valid for which device, respectively.
    >>
    >>can you tell me which tool exist that can automate this process?
    >
    >
    > There are many tools. They're called "scripting language" or "programming
    > language" ;-)

    Unfortunately these "tools" used to distribute/update MAC-IP pairs to
    the workstations will work over TCP/UDP or somethings that goes in the
    end over ARP. Which means these management tools are also vulnerable to
    ARP Spoofing attacks (if they are not properly secured) which closes the
    circle.

    Regards,
    Chris


  • Next message: Mark: "Re: Securing tcp data"