| − | A method of implementing a man-in-the-middle cyber attack is ARP poisoning. This involves the insertion of a fraudulent MAC address so that the client communicates with the wrong (usually hostile) host. Poisoning can be done at the time of request, but can be difficult to succeed at. The easier way by far to poison an ARP cache is to send out an unrequested message associating an IP address with a MAC address. These unsolicited ARP messages are almost always ignored by systems, as they should be, to maintain better security. | + | A method of implementing a man-in-the-middle cyber attack is ARP poisoning. This involves the insertion of a fraudulent MAC address so that the client communicates with the wrong (usually hostile) host. Poisoning can be done at the time of request, but can be difficult to succeed at. The easier way by far to poison an ARP cache is to send out an unrequested message associating an IP address with a MAC address. These unsolicited ARP messages are almost always ignored by systems, as they should be, to maintain better security.<ref>https://www.grc.com/nat/arp.htm</ref> |