集控地址防范ARP欺骗攻击技术的研究与探索

Technology Research Of Centralized Control Address Prevent The ARP Spoofing Attack

ARP协议是建立在信任局域网内所有结点的基础上的,它具有很高的效率,但却不安全,其缺陷很容易被人利用产生ARP欺骗攻击.该文先对ARP欺骗攻击成因进行技术分析,再结合实践研究,构建了防范ARP欺骗攻击的集控地址模型以及简易的实现方案.通过技术分析和实验验证,该文提出的集控地址模型和简易实现方案不仅能有效防范ARP欺骗攻击,而且具有一定的通用性和易用性.

ARP protocol is established on the basis of trust in all local area network nodes.It has high efficiency, but it＇s not safe, its defect is quit easy to create the ARP spoofing attacks.This thesis firstly maked a technical analysis of the cause of ARP spoofing attacks ,and then combined with the pacticale research, built the ideal mode of centralized control address to prevent the ARP spoofing attacks ,and present a simplified scheme which can be implemented. By technical analysis and experimental verification, the ideal model and the simplified solution which presented by this thesis can effectively prevent the ARP spoofing attacks, in addition,it has better general features and can be easy to be used.