earticle

영어

Address resolution is an important process in network communications. The primary function of address resolution is to determine the correspondence of a target network address to a physical address. The traditional address resolution process assumes that all the nodes on a network are honest and credible, and these nodes directly broadcast the resolution target address on the network. This process enables malicious nodes to easily mount attacks. We propose a reverse address resolution process with variable length prefix (called Re-AR) that obviates such attacks. According to the revelation principle, a node’s mapping can be viewed as a private type in the address resolution process. In our proposed process, after a node receives an address resolution request broadcast, it unicasts the private type to a positive resolve node that assigns the communication to the correct node according to a predetermined mechanism. Based on simulation results, when the destination address is hidden in the broadcast packets, malicious nodes cannot easily conduct spoofing attacks according to the destination addresses. This phenomenon effectively prevents spoofing and significantly reduces the pollution rate of address cache tables.