论校园网ARP攻击和欺骗防范策略

ARP Spoofing of Campus Network and Its Preventive Measures

在校园网上,ARP病毒的广泛分布造成了正常用户的网络中断和网关设备CPU的高负荷,网络运行不稳定。本文通过对ARP的协议结构和工作过程的分析,了解ARP报文的存在形式、报文的种类、作用和触发机制,阐述了ARP协议的漏洞,并针对由此被恶意利用产生的ARP攻击与欺骗,详解了防范的方法。

The wide distribution of ARP virus can interrupt the network of normal user and make the CPU of gateway equipment under high load condition, thus causing the instability of network operation. Through analysis on the protocol structure and working process of ARP, this paper introduced the existing forms, types, functions and the trigger mechanism of ARP packet, elaborated the vulnerability of ARP protocol, and gave a detailed description of preventive measures in view of the ARP spoofing caused by malicious use.