ARP欺骗/MITM攻击在二层交换机上的防范
|
摘要
本文主要针对目前非常典型的二层攻击和欺骗说明如何在思科交换机上组合运用和部署Dynamic ARP Inspection(DAI)技术,从而实现防止在交换环境中实施"中间人"攻击、地址欺骗等,更具意义的是通过Dynamic ARP Inspection(DAI)技术的部署可以简化地址管理,直接跟踪用户IP和对应的交换机端口;防止IP地址冲突。同时对于大多数对二层网络造成很大危害的具有地址扫描、欺骗等特征的病毒可以有效的报警和隔离。
This paper aiming at the typical two layers of attack and deception explains how to use and deployment of Dynamic ARP Inspection in Cisco switch(DAI) technology,thus preventing the exchange environment in the implementation of the "man in the middle" attack,spoofing,what is more important is through Dynamic ARP Inspection(DAI) technology deployment can simplify address management,user IP and the corresponding direct tracking the switch port to prevent IP address conflict.At the same time with address scanning,deceit and other characteristics for most of the two layer network caused much harm to the virus can effectively alarm and isolation.
This paper aiming at the typical two layers of attack and deception explains how to use and deployment of Dynamic ARP Inspection in Cisco switch(DAI) technology,thus preventing the exchange environment in the implementation of the "man in the middle" attack,spoofing,what is more important is through Dynamic ARP Inspection(DAI) technology deployment can simplify address management,user IP and the corresponding direct tracking the switch port to prevent IP address conflict.At the same time with address scanning,deceit and other characteristics for most of the two layer network caused much harm to the virus can effectively alarm and isolation.
引文
[1]王倩.高校机房ARP病毒的攻击与防范[J].电子制作.2013.
[2]杨建平.SSL中间人攻击对策研究[J].电脑知识与技术.2012.
[3]王京智,洪观甫.IP伪装技术分析[J].信息安全与技术.2012.
[4]孙莉.浅谈构建中小规模无线网络解决方案[J]科技经济市场.2011.
[5]陶松.试探网络攻击常用手段[J].电脑编程技巧与维护.2010.
[6]曹振丽,张海峰,井闽,马涛,赵军伟.计算机网络安全及其防范技术[J].中国教育信息化.2008.
[7]赵磊.浅谈网络安全中“蜜罐”技术的应用[J].科技咨询导报.2006.
[8]郑文兵.李成忠.ARP欺骗原理及一种防范算法[J]江南大学学报.2003.
[2]杨建平.SSL中间人攻击对策研究[J].电脑知识与技术.2012.
[3]王京智,洪观甫.IP伪装技术分析[J].信息安全与技术.2012.
[4]孙莉.浅谈构建中小规模无线网络解决方案[J]科技经济市场.2011.
[5]陶松.试探网络攻击常用手段[J].电脑编程技巧与维护.2010.
[6]曹振丽,张海峰,井闽,马涛,赵军伟.计算机网络安全及其防范技术[J].中国教育信息化.2008.
[7]赵磊.浅谈网络安全中“蜜罐”技术的应用[J].科技咨询导报.2006.
[8]郑文兵.李成忠.ARP欺骗原理及一种防范算法[J]江南大学学报.2003.