摘要
ARP协议欺骗作为一种交换式局域网中获取数据信息的方法,当用作攻击手段时,给网络安全带来了严重威胁。本文通过分析ARP协议的漏洞及ARP欺骗的原理,设计并实现了一种基于IP地址和物理地址标准对应库的ARP欺骗检测方法,达到了及时有效地检测出网络中存在的ARP欺骗报文的目的,实测表明效果良好,具有实用价值。
When ARP spoofing is used as an attack mean, it brings serious threats to the security of LAN. This paper analyzes the defects of ARP protocol and the basic principle of ARP spoofing. A method is designed and accomplished to monitor ARP spoofing packets, and this method is based on a standard corresponding database of IP address and MAC address. The testing of this method shows that it can work effectively and has a practical value.
出处
《计算机科学》
CSCD
北大核心
2008年第3期52-54,共3页
Computer Science
关键词
ARP协议
ARP欺骗
检测
ARP protocol, ARP spoofing, Checking method