[外文翻譯]淺談ARP攻擊和防御

包含中文翻譯和英文原文，內(nèi)容詳細(xì)完整，建議下載參考！

中文： 1870 字
英文： 5398字符



隨著計(jì)算機(jī)網(wǎng)絡(luò)的不斷發(fā)展，局域網(wǎng)中ARP病毒頻繁發(fā)作,給用戶造成不便。本文從ARP協(xié)議入手,深入分析了ARP安全漏洞及病毒攻擊原理,并對(duì)ARP欺騙的原理與攻擊方式做了深入的研究,闡明了ARP病毒欺騙的過(guò)程,給用戶提出解決這個(gè)問(wèn)題的方法。

1.引言
局域網(wǎng)里常見(jiàn)的是“ARP欺騙”木馬病毒,病毒發(fā)作時(shí)其癥狀表現(xiàn)為計(jì)算機(jī)網(wǎng)絡(luò)連接正常,能登陸成功卻無(wú)法打開(kāi)網(wǎng)頁(yè),極大地影響了局域網(wǎng)用戶的正常使用。

2.ARP協(xié)議的工作原理
在以太網(wǎng)中傳輸?shù)臄?shù)據(jù)包是以太包,而以太包的尋址是依據(jù)其首部的MAC地址。僅僅知道某主機(jī)的IP地址并不能讓內(nèi)核發(fā)送一幀數(shù)據(jù)給此主機(jī),內(nèi)核必須知道目的主機(jī)的MAC地址才能發(fā)送數(shù)據(jù)。ARP協(xié)議的作用就是在于把32位的IP地址變換成48位的以太地址。
在以太局域網(wǎng)內(nèi)數(shù)據(jù)包傳輸依靠的是MAC地址,IP地址與MAC對(duì)應(yīng)的關(guān)系依靠ARP緩存表,每臺(tái)主機(jī)(包括網(wǎng)關(guān))都有一個(gè)ARP緩存表。在正常情況下這個(gè)緩存表能夠有效保證數(shù)據(jù)傳輸?shù)囊粚?duì)一性。我們可以在命令行窗口中,輸入命令A(yù)RP-A,進(jìn)行查看,輸入命令A(yù)RP -D進(jìn)行刷新 ......



The Attack and Defense of ARP

With the continuous development of computer networks, LAN ARP virus frequently attacks, causing inconvenience to users. This article from the ARP protocol to start, in-depth analysis of the ARP security vulnerabilities and virus attacks the principle and the principle and ARP cheating attack depth study done to clarify the process of ARP virus deception, to the user to solve this problem.
1．Introduction
LAN in common is the "ARP deception," Trojans, viruses attack their symptoms for the computer network connection to normal Successful landing but could not open the page, greatly influenced the LAN user's normal use.
2.ARP protocol works
In the Ethernet packet is transmitted Ethernet packets, and Ethernet packet addressing is based on the MAC address of its first. Only know the IP address of a host does not allow the kernel to send a data to the host, the kernel must know the MAC address of the destination host can send data. ARP protocol role is to integrate 32-bit IP address converted into 48-bit Ethernet address.
In the Ethernet LAN data packet transmission relies on the MAC address, IP address and MAC ARP cache to rely on the relationship between the corresponding table......