一种带优先级和认证的ARP防攻击改进

AN ARP ATTACK-RESISTANCE IMPROVEMENT WITH PRIORITY AND AUTHENTICATION

详细分析当前局域网中普遍存在的地址解析协议攻击类型以及这些攻击的危害性。针对这些攻击的特点提出带确认机制、带分段优先级的地址解析协议改进方案。在XINU操作系统中应用此改进方案进行各种地址解析协议攻击的验证。实验表明,该改进能够很好抵御地址解析协议溢出攻击、地址解析协议欺骗攻击,且对地址解析协议报文结构没有改动,即不存在与传统地址解析协议的兼容性问题。

The paper analyzes in detail ARP attack types that are popular in present LANs along with their dangers. Then aiming at the characteristics of those attacks it puts forward an ARP improvement solution with authentication mechanism and segmented priority. Finally the improved solution is applied to XINU OS to validate various ARP attacks. Experiments prove that the improvement can well resist ARP flooding attack and ARP fraud attack; moreover ARP packet structure is intact,which means there is no compatibility problem with traditional ARP.