基于SNMP的ARP欺骗主动防御机制

An active defense ARP spoofing solution based on SNMP

重点介绍了通过监控网络设备来主动防御ARP欺骗的解决方案.该方案通过简单网络管理协议(SNMP)提取网络设备的运行状态相关信息,发现并定位ARP欺骗者,然后采取相应隔离ARP欺骗者的措施,排除ARP欺骗对网络正常运行的危害.以该解决方案为基础开发的软件,有效解决了校园网中的ARP欺骗问题.

This paper focuses on the solution of active anti ARP spoofing by monitoring and controlling network switches/routers. ARP spoofing attacker can be found by gathering related network device running status information using Simple Network Management Protocol （SNMP）. Isolating ARP spoofing attacker introduces an effective method of defense against ARP spoofing attacks. A software has been developed based on the solution, which succeed in Solving the ARP spoofing problem in the campus networks.