校园网内的ARP攻击和防御

:2010-08-24:朱晓静(1980-),女,陕西周至人,琼州学院电子信息工程学院讲师主要研究方向为计算机网络信息技术应用:海南省高等学校科学研究项目(Hjkj2009-62)17520101028Vo.l17No.5JournalofQiongzhouUniversityOct.28,2010校园网内的ARP攻击和防御朱晓静,林元乖(琼州学院电子信息工程学院,海南三亚572022):,,,ARPARP,ARP,ARP,ARP:ARP;;MAC;:TP393:A:1008-6722(2010)05-0032-041994(CERNET),,,,,,,,,ARP,ARP,1ARP的工作原理,,IP,IP,MACMAC,,MAC,IPMAC,ARP[1,2]ARPAddressResolutionProtoco,lIPMACARP,,,MAC,11AB,B,AARPARP,MACIP,IP,,BARP,ARP,MACIP,IP,(2)2ARP,ARP,,ARPARP,ARPCache,,,,CacheARP,PINGICMPICMP[3]:ARP,,ARP3PINGICMP2ARP欺骗的原理ARP,ARP,ARPARPARPARP,ARP,IPMACARP,BAARP,IP192.168.1.3(ZIP),MACaa-aa-aa-aa-aa-aa(ZMACbb-bb-bb-bb-bb-bb)ABARP,ARP,ARP,ARP,ARP2.1ARP(1):,ARPMAC,,,(2):,,[4],Internet,(3):ARPMACMACMACPC,PC,2.2ARP:IPARP,,(),335,:ARP,IEARP(),ARP,,:(MSN)(QQ),,,,3ARP攻击的防御3.1ARP,Web,,,,,,ARP,,,,[5,6]ARP,,3.2ARP!ARPARP(WindowsXP)[7,8]ARP,IPMAC,ARP,::MAC∀,cmd,,arpa,MAC:myarp.bat():@echooffarp-darpsIPMACIPMACIPMAC,*.bat:,ARPARP,ARPMAC,,,,,(2)ARP,ARP,SnifferProIPARPRequestARPReply,:tracert,tracert(17)2010(3)ARP,MAC+IP+Por,tARP,ARPamuser-bindmac-addrXX-XX-XX-XX-XX-XXip-addrX.X.X.XinterfacePortX[9],IPMACPortXPortX,IPMACIPMAC(4)ARP,MACIP,ARPARP[10](5)ARP,(SecureSocketsLayer)EmailPGP(PrettyGoodPrivacy)S/MIME(SecureMIME)(6),(7)ARP4小结,ARP,ARPARP,,ARP,,,,,:[1],,.[M].:,2009:251-252.[2].[M].:,2008:119-122.[3],.ARP[J].,2004,14(8):126-128.[4],.ARPICMP[J].,2008,34(2):103-104,107.[5].[J].,2007,11:35-36.[6].[J].,2007,8(4):77-78.[7],.ARP[J].,2007,5:88,99.[8].ARP[J].,2007,19(7):176-177.[9],./.[M].:,2009:124-125.[10].ARP[J].,2008,11:325-326.AttacksandDefenseoftheARPinCampusNetworkZHUXiaojing,LINYuanguai(CollegeofElectronicInformationEngineering,QiongzhouUniversity,SanyaHainan572022,China)Abstract:Atpresen,tcampusnetworkmakesanimportantplatformonteaching,officialworkingandstudent#sstudyetctoalargenumberofuniversity.Withthedevelopmentandexpansionofthecampusnetwork,varioussecurityissuesaremoreobviouseachday,ARPattacksareoneofthenetworkattacksthatarelargerdamagesandmoredifficultdefenseonacampusnetwork.ThearticleanalyzesindetailtheprincipleoftheARPprotoco,lstudiesthetypesofARPspoofinganddiscussesthedifficultiesofdefenseARPattacksincampusnetwork,andproposesadefensivestrategiesandmethodsofARP.Keywords:ARPspoofing;campusnetwork;MACaddress;defense355,:ARP