基于ARP协议的非法入网检测与阻止技术研究  

Study on Detection and Block of Illegal Connection to LAN Based on ARP

作　　者：吴少华[1] 方勇[1] 胡勇[1] 孙江宏[1] 

机构地区：[1]四川大学信息安全研究所

出　　处：《微计算机信息》2007年第18期27-28,26,共3页Control & Automation

基　　金：国家自然科学基金(10076011)

摘　　要：介绍ARP协议、Windows系统中ARP实现,设计了一个非法入网检测及阻止系统。该系统通过ARP扫描,实时检测非法主机(未知主机)接入内部网络的企图,并通过发送冲突包和其它伪造数据包,阻止与内部网络的其它主机进行信息交换,从而有效地保护了内部网络的信息安全。The paper introduces ARP protocol, the implement of ARP in Windows system, and designs the system of the detection and block on illegal connection to LAN. The system can detect the illegal host connecting to LAN in real time by scanning LAN, and block the swap of information between the illegal（unknown） host and other host in LAN by sending ARP packets resulting in conflicting or error. So the system can protect the security of information in LAN in effect.

关 键 词：ARP协议 非法入网 检测 阻止 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]