地址轉(zhuǎn)換協(xié)議（ARP）如果被惡意利用，會(huì)對局域網(wǎng)產(chǎn)生嚴(yán)重威脅。本文介紹了ARP 在TCP/IP 協(xié)議中的地位和作用，描述了它的工作原理，詳細(xì)分析了它的幾個(gè)主要特點(diǎn)，
然后通過一個(gè)生動(dòng)的實(shí)例介紹了黑客如何利用ARP 協(xié)議的特點(diǎn)來進(jìn)行ARP 重定向，劫持目標(biāo)主機(jī)與其它主機(jī)的會(huì)話，通過偽造會(huì)話信息實(shí)現(xiàn)攻擊目的。最后，提出了幾種防御ARP欺騙的解決方案并分析了每種方案的利弊及應(yīng)用場合。
關(guān)鍵詞：ARP；ARP 欺騙；防御
【Abstract】Hacker can attack our LAN by maliciously using the Address Resolution Protocol. This paper introduces the ARP’s function, describes its working mechanism in detail, then analyzes its main characteristics and potential insecurity. With a example, the author describes what is ARP redirection, and how ARP redirection is used in attacking action, then presents several defensive methods, analyzes every one’s disadvantage and strongpoint, points out where they should be used.
【Key words】ARP; ARP redirection; defense