0

Does subterfuge's ARP poisoning attack work on all networks? If not, what kind of precautions can be taken against it? Meaning, what kind of networks, if any, does it fail on? My understanding is that the only way to fight the attack is to have some sort of CA or web of trust; since wifi and ethernet networks don't have that capability, every network should be vulnerable. Am I right?

Improve this question

1 Answer 1

Reset to default
1

No, it isn't a silver bullet, for example:

  • You are using static ARP entries. This will completely mitigate the risk of ARP spoofing.
  • You are using encryption and you are using it properly. The bad guy can sniff your traffic, but he can't do anything with it.
Improve this answer
8
  • For encryption, you would need a way of verifying identity, e.g. using a web of trust like I said.
    – Elliot Gorokhovsky
    Commented Feb 2, 2016 at 23:50
  • Indeed, but static ARP is still an option if your network isn't too big
    – redfast00
    Commented Feb 2, 2016 at 23:52
  • So basically unless you verify everybody's identity there's no way
    – Elliot Gorokhovsky
    Commented Feb 2, 2016 at 23:53
  • What about networks where you login with a username? Because then when people join you know who they are, so you could set it up so they can't later pretend to be the router.
    – Elliot Gorokhovsky
    Commented Feb 2, 2016 at 23:54
  • You only need to verify the nodes you want to 'talk' to.
    – redfast00
    Commented Feb 2, 2016 at 23:55

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .