無線基地台的ARP Spoofing攻擊防禦機制-以Raspberry Pi架構為例

Application Raspberry Pi to Wireless ARP Spoofing Attack Defense Mechanism

林昱綸(Yu-Lun Lin)

指導教授 ： 莊振村

共同指導教授 ： 郭文中

國立虎尾科技大學/電機資訊學院/資訊工程研究所/碩士(2014年)

https://doi.org/10.6827/NFU.2014.00041

摘要

隨著科技的發展，網路的攻擊方式越來越多樣化，市面上也有許多相關的網路安全防禦軟體、弱點偵測及分析軟體來保護電腦安全，使得大部分的網路危害都能透過這些軟體達到防護效果。但其中ARP攻擊(Address Resolution Protocol Attack)在區域網路中屬於較難防範的一種攻擊手法，又由於免費的無線網路日漸增多，實屬令人更該重視的議題。
而Raspberry Pi是一個小型的硬體設備，其優勢為體積小，且能於上面安裝Linux的系統，因此本文先就ARP攻擊的方式做一深入地分析與了解之後，進而提出針對無線網路基地台遇到ARP攻擊時能夠有效進行防護的防禦機制，並且將其實作於Raspberry Pi上。

關鍵字

ARP ； ARP Spoofing ； Raspberry Pi ； 區域網路 ； 資訊安全 ； 無線網路

並列摘要

With the development of technology and various network attacks, there are many commercially available network security and defense related software, vulnerability detection and analysis software to ensure computer security. The risk of Internet attack is reduced thanks to these software. Among these Internet attacks, ARP attack (Address Resolution Protocol Attack) is more difficult to prevent in Local Area Network. Due to the increasing number of free wireless internet, there should be more focus on this issue.

The Raspberry Pi, a small hardware device, is famous for its small size and can be installed on the Linux system. After discussing and analyzing the ARP attack, we will propose a defense mechanism for the ARP attacks on wireless network base and then implement this defense mechanism on the Raspberry Pi in this thesis. According to our experiment, this defense mechanism can correctly and quickly defense ARP attack on access through Raspberry Pi wireless network.

並列關鍵字

ARP ； ARP Spoofing ； Raspberry Pi ； local area network ； information security ； Wireless Network

參考文獻

[9] Kumar, S., Tapaswi, S., “A centralized detection and prevention technique against ARP poisoning,” CyberSec, 2012 International Conference on Digital Object Identifier.

[12] Seungpyo, H., Myeungjin, O., Sangjun, L., “Design and implementation of an efficient defense mechanism against ARP spoofing attacks using AES and RSA,” Mathematical and Computer Modelling, Vol 58, No. 1-2, pp.254-256, 2013.

[14] 王永鐘，王宜秀，「ARP Spoofing 偵測及防護機制-以Arcai Netcut軟體為例」，TANET2013臺灣網際網路研討會，2013年。

[22] Cain & Abel, http://www.oxid.it/cain.html

[1] ARP協定，http://www.pcnet.idv.tw/pcnet/network/network_ip_arp.htm