An intelligent approach for dynamic network traffic restriction using MAC address verification

Networks are spread all throughout the world, usually found in homes, organizations, governments, etc. Due to the exponential growth in the deployment of networks, this field has become a prime target for attackers. A spoofing attack is a very common type of attack on a network. It may sound simple, but it is a complex technique involving impersonation and gaining access to restricted information. Some spoofing attacks complicate scenarios by launching other attackers using spoofed computers. Networks are usually unable to identify spoofing attacks since the hackers who attack can forge the MAC address of their device to impersonate another device on the network resulting in an advanced level of ARP spoofing thereby exposing the vulnerability of the network. This becomes really tricky when the attack is done in the address of a company's network. Several techniques exist to detect MAC spoofing such as Sequence Number Analysis, Radio Signal strength based detection, and Hop based detection. But all these techniques wrongly classify malicious user to be authenticated ones at times costing the authenticity of the valuable legitimate users. In this paper, a design of an address verification technique to detect threats by using multiplicative increase and additive decrease algorithm based on network localization with the support of Port Scanning, OS fingerprinting and Route Tracing algorithms has been discussed. This eliminates the chance of a legitimate user getting penalized during the traffic restriction resulting in a more trustworthy and a more intelligent network.