交换式以太网网络监听原理与防范

Study of network monitoring theory in switch Ethernet and its countermeasures

网络监听技术是网络安全领域一项重要而敏感的技术.针对交换式以太网中ARP网络监听的原理进行了分析,并提出了以加密传输为主的被动防范和以主动防御为主的监听检测防范两种防范措施.

Network monitoring technique is an important and sensitive technique in the field of network safety. Hackers usually make use of TCP/IP protocol＇s flows to spoof their target. With the combination of network monitoring , hacker can intercept and tamper his target＇s communication data, which is a significant threat to today＇s network security.This paper gives an analysis on the network monitoring theory in switeh Ethernet and puts forward several countermeasures.