Method for detecting a proxy arp agent in secure networks having embedded controllers

A computer program product for detecting a presence of a proxy Address Resolution Protocol (ARP) agent in a network comprising at least a first machine on a first subnet with an IP address in a first subnet range, and at least one embedded controller with an IP address in a second subnet range, a router, wherein said second subnet is not contactable through said router provided its proxy ARP is disabled, said first machine and embedded controller each having static routes for inter-subnet communications, said computer program product comprising:

• code implemented by a processor for identifying a test IP address by said first machine;
• code implemented by a processor for obtaining a test Media Access Control (MAC) address corresponding to said test IP address;
• code implemented by a processor for comparing said test MAC address to a range of MAC addresses for said embedded controller, and
• code implemented by a processor for generating an alarm at said first machine if said test MAC address is outside said range of MAC addresses.