Paper Abstract and Keywords |
Presentation |
2018-11-28 16:05
Scalable ARP Snooping Using Policy Based Mirroring of Core Switches Motoyuki Ohmori, Naoki Miyata (Tottori Univ.) IA2018-39 |
Abstract |
(in Japanese) |
(See Japanese page) |
(in English) |
In order to handle a computer security incident or network failure, it is important to grasp a list of pairs of IP addresses and MAC addresses of hosts. To this end, ones may poll an Address Resolution Protocol (ARP) table of a core switch at an interval using SNMP or other methods. We have, however, experienced that a MAC address of an IP address was not correctly obtained. The cause was that the IP address was duplicately assigned to different hosts. One of them was authorized but another was not. The unauthorized host then induced a security incident, and it was difficult to identify the host. It can be said that polling an ARP table is not accurate. This paper then proposes novel scalable ARP snooping to build a list of pairs of IP addresses and MAC addresses. The scalable ARP snooping employs a policy based mirroring of a switch that mirror traffic that matches a specified filter. The policy based mirroring can then mirror ARP traffic only, and reduce a load on an ARP parsing server. |
Keyword |
(in Japanese) |
(See Japanese page) |
(in English) |
ARP snooping / policy based mirroring / network switch / IP address assignment / computer security incident response / / / |
Reference Info. |
IEICE Tech. Rep., vol. 118, no. 326, IA2018-39, pp. 23-27, Nov. 2018. |
Paper # |
IA2018-39 |
Date of Issue |
2018-11-21 (IA) |
ISSN |
Online edition: ISSN 2432-6380 |
Copyright and reproduction |
All rights are reserved and no part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopy, recording, or any information storage and retrieval system, without permission in writing from the publisher. Notwithstanding, instructors are permitted to photocopy isolated articles for noncommercial classroom use without fee. (License No.: 10GA0019/12GB0052/13GB0056/17GB0034/18GB0034) |
Download PDF |
IA2018-39 |
Conference Information |
Committee |
IA |
Conference Date |
2018-11-28 - 2018-11-28 |
Place (in Japanese) |
(See Japanese page) |
Place (in English) |
Akihabara Convention Hall, 5th Floor (Conference Room 5B) |
Topics (in Japanese) |
(See Japanese page) |
Topics (in English) |
Student Sessions, etc. (cosponsored by JSPS 163rd Committee on Internet Technology) |
Paper Information |
Registration To |
IA |
Conference Code |
2018-11-IA |
Language |
English |
Title (in Japanese) |
(See Japanese page) |
Sub Title (in Japanese) |
(See Japanese page) |
Title (in English) |
Scalable ARP Snooping Using Policy Based Mirroring of Core Switches |
Sub Title (in English) |
|
Keyword(1) |
ARP snooping |
Keyword(2) |
policy based mirroring |
Keyword(3) |
network switch |
Keyword(4) |
IP address assignment |
Keyword(5) |
computer security incident response |
Keyword(6) |
|
Keyword(7) |
|
Keyword(8) |
|
1st Author's Name |
Motoyuki Ohmori |
1st Author's Affiliation |
Tottori University (Tottori Univ.) |
2nd Author's Name |
Naoki Miyata |
2nd Author's Affiliation |
Tottori University (Tottori Univ.) |
3rd Author's Name |
|
3rd Author's Affiliation |
() |
4th Author's Name |
|
4th Author's Affiliation |
() |
5th Author's Name |
|
5th Author's Affiliation |
() |
6th Author's Name |
|
6th Author's Affiliation |
() |
7th Author's Name |
|
7th Author's Affiliation |
() |
8th Author's Name |
|
8th Author's Affiliation |
() |
9th Author's Name |
|
9th Author's Affiliation |
() |
10th Author's Name |
|
10th Author's Affiliation |
() |
11th Author's Name |
|
11th Author's Affiliation |
() |
12th Author's Name |
|
12th Author's Affiliation |
() |
13th Author's Name |
|
13th Author's Affiliation |
() |
14th Author's Name |
|
14th Author's Affiliation |
() |
15th Author's Name |
|
15th Author's Affiliation |
() |
16th Author's Name |
|
16th Author's Affiliation |
() |
17th Author's Name |
|
17th Author's Affiliation |
() |
18th Author's Name |
|
18th Author's Affiliation |
() |
19th Author's Name |
|
19th Author's Affiliation |
() |
20th Author's Name |
|
20th Author's Affiliation |
() |
Speaker |
Author-1 |
Date Time |
2018-11-28 16:05:00 |
Presentation Time |
25 minutes |
Registration for |
IA |
Paper # |
IA2018-39 |
Volume (vol) |
vol.118 |
Number (no) |
no.326 |
Page |
pp.23-27 |
#Pages |
5 |
Date of Issue |
2018-11-21 (IA) |
|