以太网中基于Linux的ARP欺骗及其防范措施

ARP's Poofing and Dependences Based on Linux within Ethernet

本文首先探讨了ARP协议的特性和两个方向的地址解析问题,以及这种特性引起的在局域网中进行ARP欺骗的可能性并对两种可能的ARP欺骗攻击进行详细说明,然后给出实现这两种欺骗的程序框架。最后探讨了在以太网中如何防范ARP欺骗,给出四种防范措施,以及在发生了ARP欺骗之后如何检测出ARP欺骗的源头。

The paper first discusses the characteristics of ARP protocol and the problem of analyzing dual-direction address resolution,then it further points out and explains in detail the possibility of cheating with ARP within the LAN due to its characteristics.Furthermore it demonstrates the program frame of these two kinds of poofing,and explains some of its key functions.In the end,the paper also presents four measures of the ARP's poofing in the Ethernet as well as ways to detect the origins of the ARP's cheating.