ARP欺骗攻击类型及防御方案

Type and Defense Solution of ARP Spoofing Attack

关键词:  ARP  攻击  防御  网络安全

Key words:  ARP  attack  defense  network security

摘要:

分析ARP原理以及欺骗网关攻击、仿冒网关攻击、"中间人"攻击和泛洪攻击4种常见的ARP欺骗攻击类型,结合电子政务网ARP防御的应用实例,提出一种采用DHCP服务器和交换机的DHCP Relay Agent、DHCP Snooping功能进行防御ARP欺骗攻击的方案。该方案能够防止接入终端任何ARP欺骗攻击,可以有效解决ARP欺骗攻击问题。

Abstract:

The principle of ARP and four kinds of common types of ARP attack including deceiving gateway attack, phishing gateway attack, "middleman" attack and flooding attack were introduced and analyzed. By combining with an application of defensing ARP attack in E-government network, a solution for ARP spoofing attack by using DHCP server, DHCP Relay Agent and DHCP Snooping function of switch was proposed. This solution can prevent all ARP spoofing attack of access terminal, which effectively resolve the problem of ARP spoofing attack.