ARP协议欺骗攻击及防御方法研究

Study on Attack and Defense of ARP Protocl Spoofing

通过ARP欺骗攻击局域网是目前网络安全面对的一个主要问题,也是网络安全的一个重要研究内容,通过对ARP攻击原理分析,定位ARP攻击源头和病毒机理,讨论了现有防御方法存在的局限性,在现有的防御方法的基础上,提出几种有效的防御方法及解决方案,并对交换网络中如何利用代理ARP实现嗅探和防火墙的透明接入进行了探讨.

It is an important question which network security faces at present by using the ARP spoofing to attack LAN,it also is the important research content of network security.Through analysing the principle of ARP attack,locating the root of ARP attack and the base principle of virus,and discussing the limitation of the existing defensive measure,several effective defensive measures and the solution schemes are proposed based on the existing defensive measure,the discussions are carried on how to realize the sniffer and transparent access of the firewall by using the ARP in the switching network.