一种FTTB接入网中的ARP攻击定位系统

ARP Attack Trace Back System in FTTB Access Networks

在FTTB接入网中,需要通过大量的人工操作来查找引发ARP攻击的主机信息。通过对定位ARP攻击主机的方法进行了研究,可以设计出一种基于交换机MAC地址表与用户认证数据库的定位系统。使用该系统可自动查找并记录产生ARP攻击的主机信息,从而大大提高运营商的网络维护效率,有效ARP攻击带来的危害。

In FTTB access networks, a mass of manual operations are required to find the information of the host that launches ARP attack. After a tentative research on the method to locate such hosts, this paper proposes a new design of locating system based on the switch MAC address table and radius database. Application of this system will lead to auto locating and recording of the information of the ARP attack launching hosts, thus fundamentally increasing the operators＇ efficiency of network maintaining and lessening theharmfulness of ARP attack.