Network anti-tampering system

Abstract

A system and method detects or prevents tampering of computer networks by transmitting address messages indicating that unused network addresses are in use. The systems and method handles requests for network resources, such as Address Resolution Protocol (ARP) messages, and provides fabricated information to a potential attacker to disrupt an attack on an information system.

1 . A system to detect and prevent network tampering that receives ARP request messages and transmits ARP reply messages for any IP address not in use on the local Ethernet network, comprising: an information processing system, an Ethernet network interface connecting the information processing system to the Ethernet network, and a software program that receives and transmits ARP messages. 
     
     
         2 . The system of  claim 1 , wherein the information processing system is a custom programmed FPGA. 
     
     
         3 . The system of  claim 1 , wherein the information processing system is a custom programmed ASIC. 
     
     
         4 . The system of  claim 1 , wherein the information processing system is a custom 
     
     
         5 . The system of  claim 1 , wherein the information processing system is a virtual machine running under the control of a hypervisor. 
     
     
         6 . The system of  claim 1 , wherein the information processing system is a virtual machine running under the control of a hypervisor and the software program is a network device driver.