ARP spoofing in Computer Networks - Cheat Sheet & Quick Revision

Recall & Review

beginner

What does ARP stand for in computer networks?

ARP stands for Address Resolution Protocol. It is used to find the physical (MAC) address of a device from its IP address on a local network.

beginner

What is ARP spoofing?

ARP spoofing is a technique where a malicious device sends fake ARP messages to a local network. This tricks other devices into associating the attacker’s MAC address with the IP address of another device, like the network gateway.

intermediate

How does ARP spoofing affect network communication?

It causes data meant for one device to be sent to the attacker instead. This can lead to data interception, modification, or disruption of communication.

intermediate

Name one common use of ARP spoofing by attackers.

Attackers use ARP spoofing to perform a Man-in-the-Middle (MitM) attack, where they secretly intercept and possibly alter communication between two devices.

advanced

What is one way to protect a network from ARP spoofing?

Using static ARP entries or enabling security features like Dynamic ARP Inspection (DAI) on network switches can help prevent ARP spoofing.

What does ARP spoofing primarily target?

A The Wi-Fi password

B The DNS server settings

C The mapping between IP and MAC addresses

D The email server

ARP spoofing tricks devices by sending fake mappings between IP addresses and MAC addresses.

Which device is often impersonated in an ARP spoofing attack?

A Smartphone

B Network gateway/router

C Printer

D Web server

Attackers often pretend to be the network gateway to intercept traffic.

What kind of attack can ARP spoofing enable?

A Phishing attack

B Brute force attack

C SQL injection

D Man-in-the-Middle attack

ARP spoofing allows attackers to intercept and modify data between devices, known as a Man-in-the-Middle attack.

Which of these is a method to defend against ARP spoofing?

A Dynamic ARP Inspection

B Disabling Wi-Fi

C Changing IP addresses frequently

D Using a VPN only

Dynamic ARP Inspection helps detect and block fake ARP messages on a network.

ARP spoofing happens on which type of network?

A Local Area Network (LAN)

B Wide Area Network (WAN)

C Cellular network

D Satellite network

ARP spoofing targets devices on the same local network (LAN).

Explain what ARP spoofing is and how it can affect devices on a local network.

Think about how devices find each other on a local network and how fake information can cause problems.

Describe one method to protect a network from ARP spoofing attacks.

Consider how network devices can verify the authenticity of ARP messages.