ARP攻击与基于重定向路由欺骗技术的分析与防范

ARP Attacks and Prevention based on the Redirection Route Spoofing

网络中经常碰到ARP欺骗与重定向攻击现象,文章深入分析了二者攻击的原理及其在实际环境下的运行状态。同时指出,网络中实际存在目标主机对接收的ICMP重定向报文进行多种检查的情况,这使得ICMP重定向攻击难度加大,导致ICMP重定向攻击难以奏效。

There are ARP spoofing and ARP redirection attacks frequently encountered in the network. This paper analyzes the principle between the two attacks in depth and the running state of actual environment. At the same time, points out that the destination host will take a wide range of inspection of the received ICMP redirection message in the network. This make ICMP redirection attacks more difficult and even ineffective.