ARP协议安全漏洞分析及其防御方法  

Analysis of Security Flaw of ARP Protocol and Protecting Methods

作　　者：赵均[1] 陈克非[1] 

机构地区：[1]上海交通大学信息安全工程学院,上海200240

出　　处：《信息安全与通信保密》2006年第8期72-74,77,共4页Information Security and Communications Privacy

摘　　要：论文在对ARP协议简要介绍的基础上,主要分析了利用ARP协议漏洞进行网络攻击的原理和攻击的常见方式,讨论了防御ARP攻击的常见方法,并且针对ARP协议自身的特点,提出了一种利用“拒绝无请求型应答,采用ARP包认证”的规则防范ARP攻击的算法,适用于网络安全性要求较高的局域网。This article introduces the basic theory of ARP protocol, mainly analyses the theory of some network attacks using ARP security flaw and the regular attacking methods. This paper also discusses the regular methods against ARP attack, and gives an algorithm which used to defend the ARP attack, the algorithm uses the rule of ＂rejecting the reply without request, and using ARP packet identification＂. The algorithm is applicable to those LANs that need higher level of network security.

关 键 词：ARP协议 ARP欺骗 以太网 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP309[自动化与计算机技术—计算机科学与技术]