网关型ARP欺骗病毒的解决方案  

Solutions to ARP cheating attack at gateway

作　　者：欧黄海[1] 袁俊[1] 兰瑞乐[1] 

机构地区：[1]广西师范学院信息网络中心,广西南宁530023

出　　处：《桂林电子科技大学学报》2008年第6期486-488,共3页Journal of Guilin University of Electronic Technology

摘　　要：根据网关型ARP欺骗病毒的特点,提出了一套针对该病毒的解决方案,从DHCP服务器提取用户信息,在网关设备上将用户的IP地址和MAC地址进行绑定,从而解除该病毒对局域网的影响。该方案无须增加专用的设备,简而易行,且处理速度较快。根据该方案,设计了一整套程序,并将该程序应用到广西几所高校的校园网中,效果显著,较好地解决了网关型ARP欺骗病毒对校园网的影响。By analyzing the characteristics of ARP- cheating attack at the gateway, this paper proposed a solution to remove the influence of the virus at the LAN. According to the solution, we can first pick up the users＇ information from the DHCP and then bind the user＇s IP and MAC together at the gateway device. It is easy and quick, and needs no extra equipment. A set of procedures has been designed and applied to the LAN in a few colleges in Guangxi, which have been proved to be effective in dealing with the ARP- cheating attack at the gateway of school network.

关 键 词：ARP攻击 ARP病毒 网关型ARP病毒 

分 类 号：TP309.5[自动化与计算机技术—计算机系统结构]