ARP欺骗木马病毒分析与防御研究  

A Defense Research on the ARP Deceit of Trojan Horse Virus

作　　者：李勇[1] 

机构地区：[1]绵阳师范学院经济与管理科学系,四川绵阳621000

出　　处：《绵阳师范学院学报》2007年第2期116-119,共4页Journal of Mianyang Teachers＇ College

摘　　要：介绍了ARP协议及其工作原理,并由此指出ARP欺骗木马病毒是通过虚拟网关对局域网中的主机进行欺骗,从而捕获所有上网数据并窃取重要信息的一种病毒。文章在分析了该类病毒发作症状的基础上,给出了在局域网内定位染毒主机、预防和清除该类病毒的简单有效的解决方案。By introducing ARP agreement and its principle of work, the paper points out that the ARP deceit of Trojan Horse virus practices its deceit by way of dummy gateway to get all the surfing data and to steal important information from the host computer in the LAN. After analyzing the paroxysm symptom of this kind of virus, this paper gives out a simple but efficient salvation for the location of the polluted host computer in the LAN, so as to effectively prevent and eliminate this kind of virus.

关 键 词：ARP 病毒 MAC地址 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]