浅谈校园网ARP攻击防御解决方案

Briefly Discussing about Solutions from ARP Attack in Campus Network

随着计算机网络技术的应用和普及，计算机网络安全越显突出，网络攻击形式也变得越来越复杂、难于防御，尤其是ARP攻击的出现，更是对网络安全造成巨大的威胁。如何构建一个高效、完善的安全系统已成为安全管理领域的研究热点。由此提出一套综合的ARP攻击防御解决方案。该方案通过提高用户计算机系统的健壮性；进行路由器端ARP高速缓存表自助双向绑定，让用户便利绑定在路由器端IP—MAC对应关系；提出对攻击主机进行监控隔离的智能监控隔离系统的开发思路。通过这些措施有效地克服了以往解决方案在防御ARP攻击方面所存在的缺陷，为用户和网络管理员提供一种高效便捷、可集中化管理的解决方案。

With the application and popularization of computer network technology ,Computer network security is more and more prominent, attacks form of network are becoming increasingly complex and difficult to defense, especially the emergence of ARP attack, which causing great threat to network security. How to build an efficient, perfect security system has become a hot research in the field of security management. This paper put forward a comprehensive solution for ARP attack defense by improving the ro bustness of the user＇s computer system, ARP cache from router can binding by two-way so that users can easily binding IP-MAC. Put forward a proposal of set an Intelligent control isolation system to monitor host computer. These methods effectively overcome the shortcomings defense ARP attack in the past and provide an efficient and convenient centralized management solution for users and network administrators.