ARP欺骗攻击类型及防御方案  

Type and Defense Solution of ARP Spoofing Attack

作　　者：苏宏庆[1] 梁正安[1] 

机构地区：[1]广西计算中心,广西南宁530022

出　　处：《广西科学院学报》2009年第3期216-218,共3页Journal of Guangxi Academy of Sciences

摘　　要：分析ARP原理以及欺骗网关攻击、仿冒网关攻击、"中间人"攻击和泛洪攻击4种常见的ARP欺骗攻击类型,结合电子政务网ARP防御的应用实例,提出一种采用DHCP服务器和交换机的DHCP Relay Agent、DHCP Snooping功能进行防御ARP欺骗攻击的方案。该方案能够防止接入终端任何ARP欺骗攻击,可以有效解决ARP欺骗攻击问题。The principle of ARP and four kinds of common types of ARP attack including deceiving gateway attack, phishing gateway attack, ＂middleman＂ attack and flooding attack were introduced and analyzed. By combining with an application of defensing ARP attack in E- government network, a solution for ARP spoofing attack by using DHCP server, DHCP Relay Agent and DHCP Snooping function of switch was proposed. This solution can prevent all ARP spoofing attack of access terminal, which effectively resolve the problem of ARP spoofing attack.

关 键 词：ARP 攻击 防御 网络安全 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]