Protect your self on public WiFi networks, vulnerable for ARP spoofing how to treat it.

ARP spoofing is a kind of Man-in-the-Middle (MiTM) attack and it affects the machines in the subnet.Who will affected? Almost all. Free wifi connection even it is encrypted by WPA/WPA2. Your local network. The machines inside a subnet.How about using SSL and SSH as well as VPNs? No, those cannot protect you from being attacked by ARP spoofing. Even a switch cannot protect you from being attacked. Please refer to this presentation.

This paper is also valuable to read which is written by the developer of XARP (it will mention below).

ARP security often ignored and nobody cares about lower layer security nowadays. ARP attacks are real threat with high impact.

How can I protect myself from being attacked? Yes, you can. The following tools will alert you when the attack is taking place.

If you are Linux and/or Windows users, you can use XARP – Advanced ARP Spoofing Detection. It works on Ubuntu 12.04 but it does not support Unity which the tray icon will not be shown.

If you are Mac OSX users, you can use ARPGuard.

If you are Android users, you can use DroidSheep Guard.

Or, if you do not want to install the captioned softwares and your router can set static ARP, do it and your subnet is protected upon set.

Source: http://samiux.blogspot.co.uk/2012/06/howto-protect-you-from-being-arp.html

There are also some demostration videos on Samiux blog site.