ARP Spoofing 防護機制研究

The research of ARP Spoofing protection schema

王建盛(Cheng-Sheng Wang)

指導教授 ： 林金城

大同大學/電機資訊學院/資訊工程學系所/碩士(2011年)

摘要

當IP Over Ethernet成為目前網路世界使用最廣泛的網路架構之一時，ARP Spoofing攻擊至今仍是區域網路上一項嚴重的安全威脅，目前所提出的防護機制(或系統)均無法有效地防範ARP Spoofing攻擊，本篇論文以ARP通訊協定及區域網路的「直接通訊」特性，建立一套具IP-MAC對應關係查詢機制的ARP查詢流程，可在不需增加人員、設備及網路架構下，有效地防範ARP Spoofing攻擊。

關鍵字

區域網路 ； 直接通訊

並列摘要

IP over Ethernet is one of the world's most widely used network structure; however, ARP Spoofing attacks still remain as a serious security threat on the local area network. Despite the seriousness, there is no protective mechanism (or system) that can effectively protect against ARP Spoofing attacks available yet.
This paper will propose an ARP query process that corresponds with the current IP/MAC mapping correlations based upon the existing ARP protocol and the "Direct Communication" characteristic of the LAN, which can effectively protect against ARP Spoofing attacks without an increase of investments in personnel and equipments or change of network structures

並列關鍵字

ARP Spoofing ； ARP

參考文獻

[Bruschi 2003]D. Bruschi, A, Ornaghi, and E. Rosti, “S-ARP: A secure address resolution protocol”, 19th Annual Computer Security Applications Conference (ACSAC ’03), 10- 12 Dec. 2003, Las Vegas, Page 66.

[Gouda 2003] M. Gouda and C.-T. Huang, “A secure address resolution protocol. Computer Networks”, Vol. 41(1), Jan. 2003, pp. 57–71.

[Goyal 2005b] Goyal and A. Abraham. “An efficient solution to the ARP cache poisoning problem”, published in Lecture Notes in Computer Science (LNCS 3574) , July 2005, pp. 40–51.

[Lootah 2005]W. Lootah, W. Enck, and P. McDaniel,” TARP: Ticket-basedaddress resolution protocol”, Computer Networks Vol. 51, Issue 15, 24 October 2007,pp. 4322-4337.

[Tripunitara 1999] M. Tripunitara and P. Dutta. “A middleware approach to asynchronous and backward compatible detection and prevention of ARP cache poisoning”, Computer Security Applications Conference, (ACSAC '99) Proceedings, 15th Annual on Phoenix, AZ, 06 -10 Dec 1999, pp 303-309.