在以太网中实现安全的地址映射

Implement secure address resolution over Ethernet

随着以太网规模的不断扩大,来自网络内部的安全威胁越来越突出.本文分析了地址映射协议(ARP)的安全隐患及其在以太网中可能面对的安全威胁,提出了地址映射协议SARP.SARP通过使用专门的映射服务器可实现IP地址到硬件地址的安全映射,可以有效地避免非法用户对地址信息的纂改、重播以及实施ARP伪装攻击.

With the enlargement of the Ethemet scale, the threats from inner network have become more and more outstanding. In this paper, both the potential safety hazards of the address resolution protocol（ARP） and its would-be threats when used in Ethemet have been markedly analyzed, and also address resolution protoeol（SARP） has been introduced here. SARP can realize the safety resolution from IP address to hardware address, thus address information can effectively avoid being distorted and replayed by the illegal usem who will never carry out disguised ARP attacks.