摘要
为了改善静态绑定方法在抵御ARP攻击时存在的不易维护的问题,利用区块链技术思想,设计了一种防御成本低、后期易维护的ARP欺骗攻击防御方法。改进了区块链结构,设计了交易索引表结构,通过对比发现攻击并及时更新数据,防止后续攻击。正常改动IP后更新交易索引表中内容,保证查询正确性。分析及实验表明,基于区块链的防御方法具有较高安全性,能够保证数据不被篡改,维护成本低,能有效防御ARP欺骗攻击。
In order to improve the difficulty of maintaining the static binding method when defending against ARP attacks, a defense method was designed with the features of low cost of defense and easy maintenance by using the idea of a blockchain technology. The blockchain structure had been improved, and the transaction index table struc-ture had been designed to identify attacks and update data in a timely manner to prevent subsequent attacks.The content of the transaction index table was updated after the IP address was changed normally to ensure the correct-ness of the query. Analysis and experiments show that the blockchain-based defense method has the following merits: high security, guaranteeing the data is not tampered with, low cost of maintenance, and effective prevention against ARP spoofing attacks.
作者
刘凡鸣
石伟
LIU Fanming;SHI Wei(School of Cyber Security and Computer,Hebei university,Baoding 071002,China;Hebei Key Laboratory of High Confidence Information Systems,Baoding 071002,China)
出处
《网络与信息安全学报》
2018年第9期36-43,共8页
Chinese Journal of Network and Information Security
关键词
区块链
ARP攻击
动态更新
加密传输
blockchain
ARP attack
dynamic update
encrypted transmission