| 基于主动探测的ARP欺骗防范技术 |
| |
| 引用本文： | 辛宇,慕德俊,任帅.基于主动探测的ARP欺骗防范技术[J].信息安全与通信保密,2009(2):51-53. |
| |
| 作者姓名： | 辛宇 慕德俊 任帅 |
| |
| 作者单位： | 西北工业大学自动化学院,控制与网络安全研究所,陕西,西安,710072 |
| |
| 基金项目： | 西安交通大学机械制造系统工程国家重点实验室开放基金 |
| |
| 摘 要： | ARP（地址解析协议）是内部网络的一个重要协议，完全建立在主机相互信任的基础上，这种无状态协议为安全留下了隐患。文章分析了ARP欺骗原理和现有防范技术，提出基于主动探测的ARP欺骗防范技术。通过采取主动发送诱饵消息和ICMP探测包等措施加强ARP的安全性。该技术适合多种平台，可防范多种类型的ARP欺骗。
|
| 关 键 词： | ARP协议 ARP欺骗 主动探测 |
Anti-ARP Spoofing Technology Based on Proactive Detection |
| |
| XIN Yu,MU De-jun,PEN Shuai.Anti-ARP Spoofing Technology Based on Proactive Detection[J].China Information Security,2009(2):51-53. |
| |
| Authors: | XIN Yu MU De-jun PEN Shuai |
| |
| Affiliation: | (School of Automation, Northwestern Polytechnical University, Xi＇an Shaanxi 710072, China) |
| |
| Abstract: | ARP is an important protocol for the intranet, which is completely based on the mutual trust of the hosts, and this stateless protocol leaves hidden troubles for the security.After analyzing ARP spoofing theory and existing countermeasures, this paper puts forward an anti-ARP spoofing technology based on proactive detection, which enhances ARP security by proactively sending bait information and ICMP detection packages. This method is applicable to many platforms, and can prevent many types of ARP spoofing. |
| |
| Keywords: | ARP protocol ARP spoofing proactive detection |
| 本文献已被 维普 万方数据 等数据库收录！ |
