ARP病毒攻击机理与防御

本文针对目前局域网中地址解析协议(ARP)病毒的频繁发作,分析了ARP安全漏洞及病毒攻击原理,讨论了“中间人”攻击、MAC/CAM攻击、DHCP攻击、地址欺骗等导致局域网非正常运行的严重问题,进一步探讨在局域网内的主机、DHCP服务和网络交换设备等多方面采取相关的防护措施和应对策略。

Attack Principle and Protection from ARP Virus

The article focuses on the frequent strokes of address resolution protocol (ARP) virus on local area network at present,analyzes the security holes of ARP as well as fundamental principle of virus attacks,discusses serious problems about MAC/CAM attack,DHCP attack and MAC deceit resulting in abnormal movements of local area network,and further discusses the dual-direction protective measures and appropriate tactics in the multiple re- spects about personal computer DHCP service and network exchange equipment in local area network.