Arp Spoofing Detection And Network Trust Monitor

Abstract

ARP (Address Resolution Protocol) Spoofing Is A Very Common And Dangerous Network Attack. In This Attack, A Hacker Sends Fake ARP Messages Over A Local Area Network To Link Their Own MAC Address With The IP Address Of A Legitimate Device, Usually The Default Gateway Or Router. Once This Is Done, All The Data Meant For The Internet Goes Through The Attacker's Computer First, Allowing Them To Steal Passwords And Read Private Messages. For Our Mini-project, We Developed A Tool Called ARPTM (ARP Spoofing Detection And Network Trust Monitor) Using Python. Our Main Goal Was To Create A System That Not Only Detects The Attack But Also Stops It Automatically. We Designed A Unique 'Trust Score' System Out Of 100 For Every Device On The Network. The Tool Uses The Scapy Library To Read Network Packets In Real-time. If A Device Acts Suspiciously, Like Changing Its MAC Address Or Sending Too Many Packets At Once, Its Score Drops. If The Score Goes Below 60, Our Python Script Automatically Runs Firewall Commands To Block The Attacker And Sends Out Healing Packets To Fix The Network. Testing Showed That Our Project Detects And Stops Attacks In Less Than A Second, Making It Very Effective For Securing Local Networks.

Keywords