基于区块链的ARP欺骗攻击防御方法

Blockchain-based ARP defense scheme

为了改善静态绑定方法在抵御ARP攻击时存在的不易维护的问题,利用区块链技术思想,设计了一种防御成本低、后期易维护的ARP欺骗攻击防御方法。改进了区块链结构,设计了交易索引表结构,通过对比发现攻击并及时更新数据,防止后续攻击。正常改动IP后更新交易索引表中内容,保证查询正确性。分析及实验表明,基于区块链的防御方法具有较高安全性,能够保证数据不被篡改,维护成本低,能有效防御ARP欺骗攻击。

In order to improve the difficulty of maintaining the static binding method when defending against ARP attacks, a defense method was designed with the features of low cost of defense and easy maintenance by using the idea of a blockchain technology. The blockchain structure had been improved, and the transaction index table struc-ture had been designed to identify attacks and update data in a timely manner to prevent subsequent attacks.The content of the transaction index table was updated after the IP address was changed normally to ensure the correct-ness of the query. Analysis and experiments show that the blockchain-based defense method has the following merits： high security, guaranteeing the data is not tampered with, low cost of maintenance, and effective prevention against ARP spoofing attacks.