【摘要】 地址解析协议(ARP)工作于OSI参考模型第二层,在园区网VLAN中实现IP地址到网络接口硬件地址(MAC)的映射功能,攻击者利用ARP协议安全缺陷,在网关与主机(整个网段)之间实施ARP欺骗攻击,将会对VALN内主机产生巨大安全威胁。针对此类攻击设计与实现的网络防御模式,通过IP地址与接入层交换机端口绑定、定期在VLAN广播网关MAC地址等方法,可有效阻止该类攻击发生。更多还原

【Abstract】 Address Resolution Protocol(ARP)works in Layer 2 of the OSI reference model.It implements the mapping between IP and MAC in VLAN of campus network.The attacker uses the ARP shortage of security,implements the ARP spoofing attack between the gateway and the host computer,will be serious threat to the security of host computer in VLAN.Design and implementation of defense system for this kind of attack,through IP address and switch port binding,broadcast gateway MAC address and so on methods,can prevent this kind of attack to occur effectively.更多还原