ARP协议安全漏洞分析及其防御方法

Analysis of Security Flaw of ARP Protocol and Protecting Methods

论文在对ARP协议简要介绍的基础上,主要分析了利用ARP协议漏洞进行网络攻击的原理和攻击的常见方式,讨论了防御ARP攻击的常见方法,并且针对ARP协议自身的特点,提出了一种利用“拒绝无请求型应答,采用ARP包认证”的规则防范ARP攻击的算法,适用于网络安全性要求较高的局域网。

This article introduces the basic theory of ARP protocol, mainly analyses the theory of some network attacks using ARP security flaw and the regular attacking methods. This paper also discusses the regular methods against ARP attack, and gives an algorithm which used to defend the ARP attack, the algorithm uses the rule of ＂rejecting the reply without request, and using ARP packet identification＂. The algorithm is applicable to those LANs that need higher level of network security.