基于工作站包检测的防内网攻击软件的设计与实现

The Design and Implementation of the Intranet Attack-preventing Software Based on the Workstation Package Inspection

通过分析来自局域网内部的攻击,提出一种基于安全阀值的解决方案,即在工作站端检测ARP相关参数和UDP发包数量来判断本机是否产生内网攻击,并做出相关响应。

By analyzing the attack to the intranet from LAN,this paper tries to propose a solution based on safety threshold,that is,judging whether the computer is attacked or not by checking ARP related parameters and UDP packing number in workstation,and then making some correlated responses.