Method and apparatus for preventing spoofing of network addresses

Abstract

A method is disclosed for preventing spoofing of network addresses. A binding is established between an Internet Protocol (IP) address, a Media Access Control (MAC) address, and a port. An Address Resolution Protocol (ARP) table is updated based on the binding.

Description

technical field [0001] The present invention relates generally to computer network security. The present invention more particularly relates to methods and apparatus for preventing network address spoofing. Background technique [0002] The approaches described in this section could be pursued, but are not necessarily approaches that have been previously conceived or pursued. Therefore, unless otherwise indicated herein, the approaches described in this section are not prior art to the claims in this document and their inclusion in this section is not an admission that they are prior art. [0003] In data networks where data packets are addressed according to the Internet Protocol (IP) network layer protocol, each device on the network can be identified by an IP address. In a network using Ethernet as the data link layer, each device on the network can be identified by a Media Access Control (MAC) address. [0004] In networks using IP over Ethernet, network switches may ...

AI Technical Summary

Problems solved by technology

Therefore, future misappropriation attempts by malicious users (for example, conducting other ARP attacks) are not effectively prevented

Images