高校局域网中ARP攻击防御策略的分析与实施

随着计算机网络和信息技术的快速发展,校园网早已覆盖了整个高校,然而网络攻击威胁信息安全并严重影响校园网的正常运行,其中来自局域网的ARP攻击因其危害大和定位难等特点日益突出.为了确保校园网安全稳定,通过研究ARP协议的工作原理及其存在的漏洞,分析ARP攻击危害和原理,结合高校局域网的实际情况和网管的实战经验,提出了采用改变用户上网习惯、静态绑定IP/MAC地址、安装ARP防火墙、PPPOE拨号计费方式、VIAN划分和交换机端口隔离这几种办法结合起来,使我校的ARP攻击取得了良好的防御效果,确保校园网的安全运行.

Analysis and Implementation of ARP Attack Defense Strategy in Local Area Network of Campus

With the rapid development of computer network and information technology,the campus network has covered the whole university,but the network attack threat to information security and seriously affect the normal operation of the campus network,which comes from the LAN ARP attack due to its great harm and difficult positioning characteristics have become increasingly prominent.In order to ensure the security and stability of campus network,the working principle of ARP protocol and the existing vulnerabilities,analysis of the ARP attack and harm principle,practical experience combined with the actual situation of LAN and network management,put forward the change of Internet users habits,static binding IP/MAC address,install the ARP firewall,PPPOE dial-up,VIAN and Billing Division the switch port isolation of these kinds of methods that combine to make our school ARP attack has a good defense effect,to ensure the safe operation of the campus network.