局域网内ARP攻击的模拟及检测防御方法

Simulation of ARP Attack in Local Area Network and Detection and Defense Methods

工作在TCP/IP协议族中网络层的ARP（Address Resolution Protocol）协议是一个把网络层使用的32位的IP地址解析成数据链路层使用的48位的MAC地址的协议。该协议在设计的时候没有考虑必要的身份认证和鉴别机制,导致这一漏洞经常被黑客利用,对局域网的安全有效运作产生巨大威胁。使用Java网络和多线程编程模拟了局域网内的ARP攻击,实现了ARP攻击的检测,介绍了几种ARP攻击的防范方法。

The Address Resolution Protocol（ARP）, which works at the network layer of the TCP/IP protocol suite, is a protocol that resolves a 32-bit IP address used by the network layer into a 48-bit MAC address used by the data link layer. The lack of essential authentication and identification mechanisms of its design generating its vulnerability which is often exploited by hackers, leading to a great threat to the safe and effective operation of the LAN.using Java network and multi-threaded programming to simulate the LAN ARP attacks, implements the detections of ARP attacks, and introduce several methods to prevent ARP attacks.