针对校园网中ARP攻击的防御

通过分析ARP攻击的原理,提出在网络设备配置具备的情况下,结合动态主机分配协议(DHCP),在交换机上部署动态ARP检察(DAI)技术,使非法的ARP数据包无法进入网络;在网络设备配置不具备的情况下,通过编程,借助于计算机实现对ARP数据包的监控、对ARP攻击的预警、ARP攻击后的自动恢复,并对ARP攻击者实施隔离,进而保护内部网络.     

校园网网络计费相关的网络管理问题研究

网络流量计费是一种常见的网络管理手段。网络计费中经常遇到对流量统计结果的质疑、IP地址抢夺和账号被盗等三类问题。针对上述三类问题,通过网络管理的手段给出了分别的解决方案。     

对一种多重密钥共享认证改进方案的完善

通过分析一种多重密钥共享认证改进方案,指出其中存在的漏洞和防止成员欺骗中存在的问题,提出了自己的完善方案,使其在共享多个密钥、子密钥可以重复使用、防止管理者欺骗及参与成员欺骗等方面更加完善．     

配电网自动化DTU终端的103规约的安全性分析

IEC 60870-5-103规约是应用于继电保护设备的信息接口配套标准,传输的主要内容是与继电保护有关的信息.该报文进行的是明文传输,缺乏加密措施和数字签名机制,安全性较低.为了验证以太网传输的103规约存在安全隐患和风险,搭建了主站与配电网自动化DTU终端的通信实验环境.运用ARP欺骗手段对系统进行了中间人攻击测试,实验的结果表明以太网传输的103规约具有中间人攻击的风险.为了提高协议的安全性,提出了一种基于非对称密码算法的双向身份认证机制,并采用对称加密机制、数字签名技术确保传输报文的机密性和完整性,最后通过仿真测试验证该方法的有效性.     

Group identification as a mediator of the effect of players’ anonymity on cheating in online games

This study aims to add to the discussion about the applicability of the classical deindividuation theory and social identity model of deindividuation effects (SIDE) in explaining online behaviours. It explores the effect of anonymity in facilitating social influence of group identity in online game cheating. A nationally representative survey was conducted face to face. Results from the survey administered in Singapore confirm predictions derived from the SIDE and challenge the classical deindividuation theory. Specifically, it was concluded that the frequency of gaming with online strangers (anonymous gaming) significantly predicted the frequency of cheating in online games. The effect of anonymity on game cheating was found to be significantly mediated by the group identification with online gaming communities/groups. Gender differences were found. Male gamers cheated more frequently than female gamers. Female gamers are more likely to cheat as a consequence of group identification than male gamers. Implications and future research are discussed.     

ARP攻击与防御分析

ARP攻击会造成联网不稳定,经常致使个人或企业遭受重大损失。本文简述了几种常见的ARP攻击方式,并重点就其中一种攻击方式做了深度剖析,以实验的方式更进一步地将协议原理加以验证,最后本文对ARP攻击的防御手段及防御措施的配置方式做出了较为深入的分析和探讨。     

Microsoft Windows vs. Apple Mac OS X: Resilience against ARP cache poisoning attack in a local area network

ABSTRACT

Robust security measures are integrated into new release versions of operating systems (OSs) to ensure that users have a more secure and reliable environment in which to run their daily tasks. In this article, through extensive practical experiments, we evaluate and compare the resilience of popular versions of Microsoft Windows OSs and Apple Mac OS X against Address Resolution Protocol (ARP) cache poisoning attack in a local area network (LAN). The experimental results demonstrate clearly that all tested versions of Windows OSs and Apple Mac OS X are vulnerable to the ARP cache poisoning attack, and do not deploy built-in efficient security features to prevent success of this attack. In addition, the experimental results directly contradict the common belief that Windows OSs are always less secure than Apple OSs. On the other hand, the article analyzes the efforts that have been made and the different methods that have been applied to detect and prevent ARP cache poisoning attacks. The article shows that none of these efforts and methods has been able to give satisfactory results.     

浅谈局域网内ARP攻击的防范策略

AKP攻击是当前我们遇到的一个非常典型的安全威胁,受到ARP攻击后会出现无法正常上网、拷贝文件无法完成、出现错误、ARP包爆增、不正常的MAC地址,或错误的MAC地址,一个MAC地址对应多个IP的情况。     

浅谈园区接入层网络安全技术

针对园区网络接入层的网络安全问题,阐述接入层网络下的端口安全技术、ARP欺骗、DHCP攻击等原理和相应的防范措施.     

校园网络维护探讨

校园网络的蓬勃发展给网络管理者带来了很大的挑战和麻烦。文章主要对网络管理和维护进行了探讨,根据目前已有的防火墙技术并结合自身的经验对校园网络提出一套管理和维护的方法。深入剖析了ARP病毒的攻击原理并给出了整体解决方案,该方案旨在既保证网络安全又能提高网络的传输效率。