地址轉(zhuǎn)換協(xié)議（ARP）如果被惡意利用，會對局域網(wǎng)產(chǎn)生嚴(yán)重威脅。本文介紹了ARP 在TCP/IP 協(xié)議中的地位和作用，描述了它的工作原理，詳細(xì)分析了它的幾個主要特點，
然后通過一個生動的實例介紹了黑客如何利用ARP 協(xié)議的特點來進(jìn)行ARP 重定向，劫持目標(biāo)主機與其它主機的會話，通過偽造會話信息實現(xiàn)攻擊目的。最后，提出了幾種防御ARP欺騙的解決方案并分析了每種方案的利弊及應(yīng)用場合。
關(guān)鍵詞：ARP；ARP 欺騙；防御
【Abstract】Hacker can attack our LAN by maliciously using the Address Resolution Protocol. This paper introduces the ARP’s function, describes its working mechanism in detail, then analyzes its main characteristics and potential insecurity. With a example, the author describes what is ARP redirection, and how ARP redirection is used in attacking action, then presents several defensive methods, analyzes every one’s disadvantage and strongpoint, points out where they should be used.
【Key words】ARP; ARP redirection; defense