一种改进的ARP协议欺骗检测方法  

A Checking Method of ARP Spoofing

作　　者：张洁[1] 武装[1] 陆倜[1] 

机构地区：[1]北京信息科技大学

出　　处：《计算机科学》2008年第3期52-54,共3页Computer Science

摘　　要：ARP协议欺骗作为一种交换式局域网中获取数据信息的方法,当用作攻击手段时,给网络安全带来了严重威胁。本文通过分析ARP协议的漏洞及ARP欺骗的原理,设计并实现了一种基于IP地址和物理地址标准对应库的ARP欺骗检测方法,达到了及时有效地检测出网络中存在的ARP欺骗报文的目的,实测表明效果良好,具有实用价值。When ARP spoofing is used as an attack mean, it brings serious threats to the security of LAN. This paper analyzes the defects of ARP protocol and the basic principle of ARP spoofing. A method is designed and accomplished to monitor ARP spoofing packets, and this method is based on a standard corresponding database of IP address and MAC address. The testing of this method shows that it can work effectively and has a practical value.

关 键 词：ARP协议 ARP欺骗 检测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TN927.2[自动化与计算机技术—计算机科学与技术]