基于Libpcap的局域网ARP攻击与防御系统  

ARP Attacks and Defense System Based on Libpcap

作　　者：夏磊[1] 杨善林[1] 褚伟[1] 

机构地区：[1]合肥工业大学计算机网络所,安徽合肥230009

出　　处：《计算机技术与发展》2009年第3期164-167,共4页Computer Technology and Development

基　　金：国家自然科学基金(70471046)

摘　　要：针对局域网中ARP的攻击,从ARP协议的角度,分析了ARP攻击的原理和它们导致终端用户访问服务器时出现异常中断的情况。同时,围绕该协议内在的缺陷,详细说明了ARP攻击的过程,并利用Libpcap对网络数据进行抓包分析,实现了对ARP攻击的一种有效的检测系统。最后提出了ARP攻击的几种防御方法。For the ARP attacks and from the point of its protocol, analyzes the principle of ARP attacks and the failed access to server caused by it. Meanwhile, through analysing the deficiency of the protocol, illustrates the ARP attacks course and grabs the data packets by making use of the Libpcap, then realizes a kind of detecting system of ARP attacks effectively. Finally, proposes some solutions and strategies to solve the problem.

关 键 词：ARP协议 数据包 LIBPCAP 检测系统 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]