基于WinPcap实现对ARP欺骗的检测和恢复

ARP spoofing detection and recovery based on WinPcap

在分析ARP欺骗实现原理的基础上,提出一种网络级的检测与恢复方法,并基于WinPcap实现了这种方案。这种方法与以往基于主机的检测方法相比,可避免网络内部所有主机重复安装,具有占用系统资源小、实现简单、便于移植的优点,能够有效地消除网络上存在的ARP欺骗。

The principle of the ARP Spoofing was analyzed,a scheme of detecting and restoring ARP Spoofing was provided,and this method was implemented by WinPcap. Compared with other methods,this method could avoid installing repeatedly and had the advantage of saving system resource,designing and replanting simply. It could detect and remove ARP Spoofing on the network effectively.