Method for preventing attack of address resolution protocol

Abstract

The method comprises: the identification device identifies the received ARP list item sent from identified device; according to the received ARP list item, the identification device sends the IP address identification requesting frame to the identified device in order to make address identification; after the identified device receives the IP address identification request frame of said identification device; said identified device returns IP address identification response frame; if the IP address is successfully identified, then forming mainframe routing item; otherwise, said IP address identification fails so as to reject the identified device.

Description

A Method of Preventing Address Resolution Protocol Attack technical field The invention relates to IP (Internet Protocol) network communication security technology, in particular to providing a method for preventing ARP (Address Resolution Protocol) attacks. Background technique The ARP protocol lacks the design defect of the security mechanism, which makes it vulnerable to attack and spoofing. The common ones are ARP scanning attack, ARP proxy spoofing and so on. Attackers often use virus programs or hacker programs to attack network system equipment, which can lead to serious degradation of network performance or even network paralysis. The security weakness of the ARP protocol has become the short board of the TCP / IP (Transmission Control Protocol / Internet Protocol) protocol cluster. For example, the ARP virus causes the host in the network to perform an ARP scanning attack on the gateway device, which can interrupt the communication of the entire subnet. Therefore, t...

AI Technical Summary

Problems solved by technology

For ARP spoofing attacks and ARP proxy attacks, existing security mechanisms cannot detect

Images