基于SNMP的ARP欺骗监控研究  

RESEARCH ON ARP SPOOFING MONITORING BASED ON SNMP

作　　者：刘素平[1,2] 丁永生[1] 钱斌[2] 

机构地区：[1]东华大学信息科学与技术学院,上海200051 [2]东华大学信息化办公室,上海200051

出　　处：《计算机应用与软件》2009年第1期44-46,共3页Computer Applications and Software

基　　金：国家自然科学基金重点项目(60534020);教育部新世纪优秀人才支持计划(NCET-04-415);教育部科技创新工程重大项目培育资金项目(706024);上海市国际科技合作基金项目(061307041)

摘　　要：针对目前频频发生的ARP(Address Resolution Protocol)欺骗,介绍了该攻击对客户机信息安全及网络运行造成的破坏性。从理论上对ARP欺骗原理进行深入剖析,介绍常用防范ARP欺骗的方法,并给出这些方法的安全评估。最后,着重提出利用SNMP技术监控ARP欺骗的方法,及其在校园网中的实施方案。实际测试表明该方法是可行有效的。The destruction which ARP spoofing attack makes against the information security of user＇s terminal and network operation is introduced, for it happens very often now. The rationale of ARP spoofing is analyzed deeply, and then we discuss some regular methods against ARP spoofing and give out the security evaluation of these methods. Finally, we put importance on the monitoring method for ARP spoofing with the SNMP technology, and propose a realizing approach on campus network. It is proved by the results of actual testing that the approach is feasible and effective.

关 键 词：ARP协议 ARP欺骗 SNMP MIB 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP393.07[自动化与计算机技术—计算机科学与技术]