[1]王晓妮,韩建刚.基于免疫网络的ARP攻击防御方案研究与实施[J].计算机技术与发展,2019,29(04):95-99.[doi:10. 3969 / j. issn. 1673-629X. 2019. 04. 020]
　WANG Xiao-ni,HAN Jian-gang.Research and Implementation of ARP Attack and Defense Scheme Based on Immune Network[J].,2019,29(04):95-99.[doi:10. 3969 / j. issn. 1673-629X. 2019. 04. 020]
点击复制

基于免疫网络的ARP攻击防御方案研究与实施()
分享到：

《计算机技术与发展》[ISSN:1006-6977/CN:61-1281/TN]

卷:
29
期数:
2019年04期
页码:
95-99
栏目:
安全与防范
出版日期:
2019-04-10

文章信息/Info

Title:
Research and Implementation of ARP Attack and Defense Scheme Based on Immune Network
文章编号:
1673-629X(2019)04-0095-05
作者:
王晓妮1; 韩建刚2
1. 咸阳师范学院 信息中心,陕西 咸阳 712000;2. 西北机电工程研究所电调室,陕西 咸阳 712000
Author(s):
WANG Xiao-ni1; HAN Jian-gang2
1. Information Center,Xianyang Normal University,Xianyang 712000,China;2. Electrical Debugging of Northwest Institute of Mechanical and Electrical Engineering,Xianyang 712000,China
关键词:
校园网; ARP协议; ARP攻击; 免疫网络
Keywords:
campus network; ARP; ARP attack; immune network
分类号:
TP393. 18
DOI:
10. 3969 / j. issn. 1673-629X. 2019. 04. 020
摘要:
ARP攻击是利用ARP协议设计时缺乏安全验证漏洞来实现的,通过伪造ARP数据包来窃取合法用户的通信数据,造成影响网络传输速率和盗取用户隐私信息等严重危害。为了解决校园网中难以彻底清除的ARP攻击现象,提出了一种基于免疫网络的ARP防御方案。通过研究ARP协议及其工作原理和ARP攻击引起的危害及其攻击原理,采取免疫网络技术来防御校园中的ARP攻击欺骗。经过分析用户需求和方案设计思想,设计了方案的技术架构和体系架构,部署并实现了免疫网络防御方案。对该方案在校园网中进行了应用测试,经过实验比较分析,结果表明免疫网络方案比目前常见的ARP防御措施的防御效果更好,能够很好地监控和防御校园的ARP病毒,解决了目前存在的无法彻底根除ARP攻击欺骗防御技术的瓶颈。
Abstract:
ARP attack is realized by the lack of security verification loopholes in the design of ARP protocol. It steals the communicationdata of legitimate users by forging ARP data packets,causing serious harm such as affecting the network transmission rate and stealing user privacy information. In order to solve the problem of ARP attack in campus network,we propose an ARP defense scheme based on immune network. By studying the ARP protocol and its working principles,and the harm caused by the ARP attack and its attack principle, the immune network technology is adopted to prevent the ARP attack fraud in the campus. After analyzing the user requirements and thedesign idea of the scheme,the technical framework and architecture of the scheme are designed,and the immune network defense schemeis deployed and implemented. This scheme has been tested in the campus network. The experimental comparison and analysis shows thatthe proposed scheme has better defense effect than the common ARP defense measures. It can monitor and defend the ARP virus of campus well,and solve the bottleneck of the existing technology that can not completely root apart the ARP attack deception defense technology.

相似文献/References:

[1]李元 吴勇 李祥.ARP协议的描述与TLA验证[J].计算机技术与发展,2010,(06):163.
　LI Yuan,WU Yong,LI Xiang.The Description and Validation of ARP Protocol Based on TLA[J].,2010,(04):163.
[2]夏磊 杨善林 褚伟.基于Libpcap的局域网ARP攻击与防御系统[J].计算机技术与发展,2009,(03):164.
　XIA Lei,YANG Shan-lin,CHU Wei.ARP Attacks and Defense System Based on Libpcap[J].,2009,(04):164.
[3]王思敏 葛玮 王学强 潘天石.基于隧道模式的校园网多出口解决方案[J].计算机技术与发展,2008,(10):250.
　WANG Si-min,GE Wei,WANG Xue-qiang,et al.A Solution about Multi- Export Campus Network Based on Tunnel Model[J].,2008,(04):250.
[4]赵丽.网络测试技术在校园网建设与维护中的应用[J].计算机技术与发展,2007,(09):174.
　ZHAO Li.Application of Network Testing Technology to Campus Network Construction and Maintenance[J].,2007,(04):174.
[5]刘涛 潘道远.校园网络环境下数字签名的研究与设计[J].计算机技术与发展,2007,(12):128.
　LIU Tao,PAN Dao-yuan.Research and Design of Digital Signature Based on Campus Network Environment[J].,2007,(04):128.
[6]江伟 苏本跃 周健.IPSec在基于IPv6的校园网安全中的应用研究[J].计算机技术与发展,2007,(02):229.
　JIANG Wei,SU Ben-yue,ZHOU Jian.Research on Application of IPSec at Campus Network of IPv6[J].,2007,(04):229.
[7]时晨 申普兵 杨瑾 沈向余.IPv6校园网环境下IPSec VPN的安全性研究[J].计算机技术与发展,2010,(10):167.
　SHI Chen,SHEN Pu-bing,YANG Jin,et al.Research on IPSec VPN Security Based on IPv6 Campus Network[J].,2010,(04):167.
[8]田小萍 孙建刚 陈金焘 陈平.计费网关系统在多出口多核心校园网的部署研究[J].计算机技术与发展,2011,(02):22.
　TIAN Xiao-ping,SUN Jian-gang,CHEN Jin-tao,et al.Deployment Solution Research of Authentication and Accounting System Based on Multi-exit and Multi-core Campus Network[J].,2011,(04):22.
[9]蒋建军. 数字校园网络立体化安全防护的研究[J].计算机技术与发展,2015,25(09):159.
　JIANG Jian-jun. Research on Digital Campus Three Dimensional Network Security Protection[J].,2015,25(04):159.

更新日期/Last Update: 2019-04-10