ARP Test Suite Data Sheet
Test Suite:
ARP Test Suite
Direction:
Client

As ARP is a necessary companion protocol for IP in Ethernet network environments, the robustness of ARP implementations is fundamental to the overall robustness of IPv4 and related protocol stack implementations. A well-functioning network protocol stack is the cornerstone of any modern operating system, device or application. For this reason, ARP message handling inside the network protocol stack must be verified and proven against protocol attacks. Robustness shortcomings in core network protocol implementations result in undesirable network downtime and denial-of-service conditions. Entire networks may be rendered inaccessible to their users or customers. For this reason it is absolutely vital to gauge the level of security in all components that may be exposed to external intrusion attempts. This information is invaluable in mitigating threats and performing informed risk analysis. To guarantee the continuous and error-free operation of the current and future networks, the dependability of various ARP protocol implementations must be verified.

Used specifications

Specification
Title
EDSA-402

ISA Security Compliance Institute - Embedded Device Security Assurance - Testing the robustness of implementations of the IETF ARP protocol over IPv4 - Version 2.31

RFC791

Internet Protocol

RFC826

ARP

RFC894

A Standard for the Transmission of IP Datagrams over Ethernet Networks

RFC903

RARP

RFC1042

A Standard for the Transmission of IP Datagrams over IEEE 802 Networks

RFC1122

Requirements for Internet Hosts -- Communication Layers

RFC1931

DRARP

RFC2390

InARP

RFC3297

Dynamic Configuration of IPv4 Link-Local Addresses

RFC5494

IANA Allocation Guidelines for the Address Resolution Protocol (ARP)

Test tool general features
  • Fully automated black-box negative testing
  • Ready-made test cases
  • Written in Java(tm)
  • GUI command line remote interface modes
  • Instrumentation (health-check) capability
  • Support and maintenance
  • Comprehensive user documentation
  • Results reporting and analysis