局域网中的ARP重定向攻击及防御措施

ARP Redirection Attack and Defensive Methods in LAN

地址转换协议(ARP)如果被恶意利用,会对局域网产生严重威胁。本文介绍了ARP在TCP/IP协议中的地位和作用,描述了它的工作原理,详细分析了它的几个主要特点,然后通过一个生动的实例介绍了黑客如何利用ARP协议的特点来进行ARP重定向,劫持目标主机与其它主机的会话,通过伪造会话信息实现攻击目的。最后,提出了几种防御ARP欺骗的解决方案并分析了每种方案的利弊及应用场合。

Hacker can attack our LAN by maliciously using the Address Resolution Protocol. This paper introduces the ARP＇ s function, describes its working mechanism in detail, then analyzes its main characteristics and potential insecurity. With a example, the author describes what is ARP redirection, and how ARP redirection is used in attacking action, then presents several defensive methods, analyzes every one＇s disadvantage and strongpoint, points out where they should be used.