校园网络环境下ARP协议攻击原理及其防范措施

Attacks Principle＆ Preventive Measures of ARP Protocol Under Campus Network

本文从ARP协议功能入手，阐述AKP工作机制。通过分析AKP协议工作原理，讨论ARP协议从IP地址到物理地址解析过程中存在的安全隐患，给出同一网段和跨网段ARP欺骗过程。文章从用户端和网络设备端角度，提出了应对策略，包含IP地址和MAC地址绑定、交换机端口和MAC地址绑定、VLAN隔离等技术对ARP欺骗攻击的安全防范策略。

From the function of the ARP protocol to explain the working mechanism ARP.ARP works by analyzing the protocol,discuss the ARP protocol to the physical address from IP address resolution process in the presence of the security risk,given the same network segment and the process of inter-segment ARP cheating. Articles from the client and the network equipment side,puts forward the countermeasures,including the IP address and MAC address binding,switch port and MAC address binding,VLAN isolation techniques on the ARP spoofing attack,the security policy.