计算机工程 ›› 2011, Vol. 37 ›› Issue (5): 181-183.doi: 10.3969/j.issn.1000-3428.2011.05.061

• 安全技术 • 上一篇    下一篇

针对校园网ARP攻击的主动防护方案

郭 征,吴向前,刘胜全   

  1. (新疆大学现代教育技术中心,乌鲁木齐 830046)
  • 出版日期:2011-03-05 发布日期:2012-10-31
  • 作者简介:郭 征(1971-),男,工程师,主研方向:信息系统工程, 网络与信息安全;吴向前,教授级高级工程师;刘胜全,教授
  • 基金项目:
    新疆大学自然科学基金资助项目(XY080157)

Active Protection Scheme Against ARP Attack in Campus Network

GUO Zheng, WU Xiang-qian, LIU Sheng-quan   

  1. (Modern Education Technology Center, Xinjiang University, Urumqi 830046, China)
  • Online:2011-03-05 Published:2012-10-31

摘要: 针对校园网中频繁发作的ARP协议欺骗攻击,提出一种主动防护方案。通过对ARP攻击的原理和方法进行分析,实现与校园网身份认证系统联动实时定位主机攻击、强制对接入用户隔离的主动防护。实践结果表明,该方案通用性强,可有效抵御多数ARP攻击,降低网络管理难度,提高网络运行水平。

关键词: 地址解析协议, 简单网络管理协议, Telnet协议, Radius服务

Abstract: Aiming at the deceive attack of ARP protocol in campus network, this paper proposes an active protection scheme. It analyses method and principle of ARP attack and realizes the location of attack with ID authentication system and active protection force to isolate users. Application result shows that the scheme can be against most ARP attack, reduce the difficulty of network management and decrease the level of network running.

Key words: Address Resolution Protocol(ARP), Simple Network Management Protocol(SNMP), Telnet protocol, Radius service

中图分类号: