denial of service due to direct and indirect arp storm attacks in lan environment拒绝服务由于在局域网环境中直接或间接的arp风暴袭击.pdfVIP

Journal of Information Security, 2010, 1, 88-94 doi:10.4236/jis.2010.12010 Published Online October 2010 (http://www.SciRP.org/journal/jis) Denial of Service Due to Direct and Indirect ARP Storm Attacks in LAN Environment* Sanjeev Kumar, Orifiel Gomez Department of Electrical/Computer Engineering, University of Texa s—PanAm, Edinburg, USA Email: sjk@, sanjeevk@ Received October 3, 2010; revised October 16, 2010; accepted October 19, 2010 Abstract ARP-based Distributed Denial of Service (DDoS) attacks due to ARP-storms can happen in local area net- works where many computer systems are infected by worms such as Code Red or by DDoS agents. In ARP attack, the DDoS agents constantly send a barrage of ARP requests to the gateway, or to a victim computer within the same sub-network, and tie up the resource of attacked gateway or host. In this paper, we set to measure the impact of ARP-attack on resource exhaustion of computers in a local area network. Based on attack experiments, we measure the exhaustion of processing and memory resources of a victim computer and also other computers, which are located on the same network as the victim computer. Interestingly enough, it is observed that an ARP-attack not only exhausts resource of the victim computer but also signifi- cantly exhausts processing resource of other non-victim computers, which happen to be located on the same local area network as the victim computer. Keywords: ARP Attack, Computer Network Security, Computer Systems, Direct Attack, Distributed Denial of Ser- vice Attacks (DDoS), Indirect Attack, Local Area Networks 1. Introduction increase in use of Multiple Windows-based DDoS agents.