共享以太网反监听新技术的研究与实现  

Research and Implementation of a New Anti-sniffing Means in Shared-Ethernet

作　　者：李婧[1] 魏军[1] 曾斌[1] 

机构地区：[1]海军工程大学管理工程系,湖北武汉430033

出　　处：《武汉理工大学学报（信息与管理工程版）》2007年第6期50-52,共3页Journal of Wuhan University of Technology：Information & Management Engineering

基　　金：国防预研基金资助项目(98J19.3.2.JB1105)

摘　　要：网络监听极大地威胁着网络的安全,如何检测发现监听行为至关重要。根据共享以太网的监听原理,克服已有检测方法的缺陷,提出并实现了基于“毒害ARP缓存”攻击的检测技术。这种新的检测方法对高级监听器依然适用。Network sniffer greatly threatens the network security. So how to detect the sniffer becomes very important. According to the theory of network sniffing in shared - Ethernet, a new anti - sniffing means based on ARP cache poisoning attack is put forward which has avoided the limitations of existing methods and is also applicable to advanced sniffer.

关 键 词：网络安全 反监听 混杂模式 毒害ARP缓存 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]