| 动态双绑:一种ARP缓存污染解决方案 |
| |
| 引用本文： | 宋维佳,周昌令,崔健,尚群,张蓓.动态双绑:一种ARP缓存污染解决方案[J].中国海洋大学学报(自然科学版),2008(Z1). |
| |
| 作者姓名： | 宋维佳 周昌令 崔健 尚群 张蓓 |
| |
| 作者单位： | 北京大学计算中心网络与软件安全保障教育部重点实验室 |
| |
| 摘 要： | ARP协议设计使之易受到ARP缓存污染的攻击。ARP缓存污染又衍生出中间人攻击等各种网络安全问题。现有的解决方案多种多样但各有优缺点。本文基于ARP缓存污染攻击规律,利用动态IP-MAC绑定算法配合交换机ARP检查功能,设计了1种适用于大型网络的、灵活易部署的ARP缓存污染解决方案。实验证明了解决方案的有效性。
|
| 关 键 词： | 网络安全 安全方案 IP-MAC绑定 ARP缓存污染 |
Dynamic Dual-Binding: A Solution to ARP Cache Poisoning |
| |
| SONG Wei-Jia,ZHOU Chang-Ling,CUI Jian,SHANG Qun,ZHANG Bei.Dynamic Dual-Binding: A Solution to ARP Cache Poisoning[J].Periodical of Ocean University of China,2008(Z1). |
| |
| Authors: | SONG Wei-Jia ZHOU Chang-Ling CUI Jian SHANG Qun ZHANG Bei |
| |
| Institution: | SONG Wei-Jia,ZHOU Chang-Ling,CUI Jian,SHANG Qun,ZHANG Bei(Computer Center & Key Laboratory of Network , Software Security Assurance,Peking University,Beijing 100871,China) |
| |
| Abstract: | ARP protocol is vulnerable to ARP Cache Poisoning, which fosters a variety of security issues such as Man-In-The-Middle attack. There are pros and cons of existing approaches to this issue.Based on the characteristics of ARP Cache Poisoning attacks,we combine the ARP inspection function of switches with dynamic IP-MAC binding algorithms to design a new solution to ARP Cache Poisoning.Our solution is flexible and deployment-friendly to large-scale networks.Experiment demonstrates the effectiveness of the sol... |
| |
| Keywords: | network security security solution IP-MAC binding ARP cache poisoning |
| 本文献已被 CNKI 维普 等数据库收录！ |
|
