基于ARP欺骗的局域网防御界面研究

An Interface Study of LAN Shield Based on ARP Spoofing

ARP欺骗是目前较严重的一种网络安全问题,它利用ARP的漏洞进行网络攻击,发送错误的IP/MAC地址攻击欺骗主机,更新欺骗主机的ARP地址表,从而达到使主机间不能正常通信的目的。文章主要探究WinPcap技术的过滤功能。通过设置过滤条件,判断是否发生ARP欺骗。

ARP spoofing is a serious network security problem. It attacks the network taking advantage of the vulnerabilities of ARP, cheats the host by sending the wrong IP/MAC address and updates the ARP address table so as to achieve the aim of stopping normal communication between hosts. This thesis mainly researches the WinPcap filtering function. By setting the filter conditions, we can judge whether there is ARP spoofing.