A Combination of ICMP and ARP for DHCP Malicious Attack Identification
Mayoon Yaibuates, Roungsan Chaisricharoen
Abstract
Internet Control Message Protocol (ICMP) is very useful when diagnostic network problem. ICMP is being used and turns on automatically by an Operating System. For security reason, this protocol can be at ease turn off temporary or permanently by security administrators such as an event of preventing, delaying attackers from incorrectly identifying devices. The ICMP disabling leads to a fundamental problem in the previous model- identifying Dynamic Host Configuration Protocol (DHCP) malicious request by implementing ICMP. To overcome this specific problem, the proposed model will be implementing Address Resolution Protocol (ARP) in conjunction with ICMP for identifying malicious IP address request through DHCP.