防范因特网协议地址盗用的新方法

New method to avoid IP address embezzlement

因特网协议地址（Ｉｎｔｅｒｎｅｔｐｒｏｔｏｃｏｌａｄｄｒｅｓｓ，简称ＩＰ地址）盗用是ＴＣＰ／ＩＰ网络中的一个普遍性问题，尤其是在按流量计费的ＣＥＲＮＥＴ网络中此问题更为严重。因此，在分析ＩＰ地址盗用方法的基础上，从ＴＣＴ／ＩＰ不同层次提出相应的防范措施，并给出一种较为理想的解决方案及其实现方法。该方法综合利用ＴＣＴ／ＩＰ数据链路层、ＩＰ层和应用层的网络信息，使用ＡＲＰ截断、静态路由、包过滤及用户注册等多种防范措施解决ＩＰ盗用问题。从实际运行结果看，该方法能够较好地解决校园网环境中ＩＰ地址盗用问题。

IP address embezzlement is a universal problem in TCP/IP network, especially in CERNET. This paper first analyzed the way of IP address embezzlement, provided relevant ways in different level of TCP/IP protocol to prevent it, and emphasized in a new resolution and its implementation. The new way can make use of information in data link level, IP level and application level of TCP/IP network. It can use some measures to avoid IP address embezzlement, such as ARP truncation, static routing, packet filtration and user register. By system running, the way can solve the problem of IP address embezzlement in campus network.