Dynamic Trust Model of ARP Real-Time Intrusion Detection Based on Extended Subjective Logic

This paper analyzes the ARP protocol and its operating principle, as well as the current protection method for ARP spoofing attacks to understand their defense and detection features. To study the principle of realization and complexity for these methods, and summarize their proper environment, strength and weakness, based on the WinPcap research, this paper mentioned this Dynamic Trust Model of ARP Real-Time Intrusion Detection based on Extended Subjective Logic(DTMARID-ESL). This model introduces Jasang's Subjective logic to detect ARP Intrusion behavior, and extend its subjective logic to solve and detect ARP intrusion's dynamic trust problems, including basic elements such as base rate and un-certain factors, etc.) and dynamic evaluation from time and space. The simulation results show this model has high accuracy and efficiency.