ARP攻击的原理分析及防范对策研究
|
摘要
计算机网络的迅猛发展和普及,改变了人们的工作与生活,但同时也给人们带来了新的隐患,网络安全事件层出不穷。在目前计算机网络运行与使用中,ARP攻击成为最为常见的问题。本文结合自身实际工作经验,提出了一种新的ARP防御方案,在介绍IP地址和MAC地址的基础上,阐述了ARP协议的工作过程,剖析了ARP协议存在的弊端,分析了ARP攻击的原理。从网管中心端和用户端两个角度讨论防范ARP攻击的策略,并在网络环境中演示了这些策略防范ARP攻击的效果。
The rapid development and popularization of computer network have changed people's work and life,but also brought people new hidden troubles-endless network security events.In the current computer network operation and application,ARP attack constitutes the most common problem.The paper proposes a new ARP defense scheme based on practical experience.On the basis of introducing IP address and MAC address,this paper elaborates on the working process of ARP protocol,expounds the disadvantages of ARP,and analyzes the principle of ARP attack.This paper discusses the strategies of preventing ARP attack from both the network tube center and the user,and demonstrates these strategies in the network environment to prevent the effects of ARP attack.
The rapid development and popularization of computer network have changed people's work and life,but also brought people new hidden troubles-endless network security events.In the current computer network operation and application,ARP attack constitutes the most common problem.The paper proposes a new ARP defense scheme based on practical experience.On the basis of introducing IP address and MAC address,this paper elaborates on the working process of ARP protocol,expounds the disadvantages of ARP,and analyzes the principle of ARP attack.This paper discusses the strategies of preventing ARP attack from both the network tube center and the user,and demonstrates these strategies in the network environment to prevent the effects of ARP attack.
引文
[1]温卓然.ARP防御系统的设计和实现[D].北京邮电大学,200935.
[2]曹洪武.ARP欺骗入侵的检测与防范策略[J].塔里木大学学报,2007(02):88-91.
[3]徐功文,陈曙,时研会.ARP协议攻击原理及其防范措施[J].信息技术与信息化,2005(01):4-6.
[4]孟晓明.基于ARP的网络欺骗的检测与防范[J].信息技术2005(05):41-44;75.
[5]Curriculum vitae Alissa Jan Arp[J].Romberg Tiburon Center for Environmental Studies San Francisco State University,2005(4):40-42.
[6]王小玲,周刚.一种扩展的ARP协议设计[J].四川理工学院学报(自然科学版),2011(02):178-181.
[7]吴小平,周建中,方晓惠.基于SNMP的ARP欺骗主动防御机制[J].华中师范大学学报(自然科学版),2007(04):512-514.
[8]何显文.基于ARP协议的网络欺骗与防范[J].通化师范学院学报,2011(06):22-24.
[9]潘晓君.基于缓存超时的ARP欺骗攻击协议的研究[J].计算机技术与发展,2009(10):167-169.
[10]姚小兵.ARP协议简析及ARP病毒攻击的防御[J].信息网络安全,2009(09):49-50;55.
[11]沈涛.基于入侵检测的网络安全研究[D].重庆大学,2012240-228.
[12]樊景博,刘爱军.ARP病毒的原理及防御方法[J].商洛学院学报,2007(02):37-41.
[2]曹洪武.ARP欺骗入侵的检测与防范策略[J].塔里木大学学报,2007(02):88-91.
[3]徐功文,陈曙,时研会.ARP协议攻击原理及其防范措施[J].信息技术与信息化,2005(01):4-6.
[4]孟晓明.基于ARP的网络欺骗的检测与防范[J].信息技术2005(05):41-44;75.
[5]Curriculum vitae Alissa Jan Arp[J].Romberg Tiburon Center for Environmental Studies San Francisco State University,2005(4):40-42.
[6]王小玲,周刚.一种扩展的ARP协议设计[J].四川理工学院学报(自然科学版),2011(02):178-181.
[7]吴小平,周建中,方晓惠.基于SNMP的ARP欺骗主动防御机制[J].华中师范大学学报(自然科学版),2007(04):512-514.
[8]何显文.基于ARP协议的网络欺骗与防范[J].通化师范学院学报,2011(06):22-24.
[9]潘晓君.基于缓存超时的ARP欺骗攻击协议的研究[J].计算机技术与发展,2009(10):167-169.
[10]姚小兵.ARP协议简析及ARP病毒攻击的防御[J].信息网络安全,2009(09):49-50;55.
[11]沈涛.基于入侵检测的网络安全研究[D].重庆大学,2012240-228.
[12]樊景博,刘爱军.ARP病毒的原理及防御方法[J].商洛学院学报,2007(02):37-41.