...
  • 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>International journal of internet protocol technology >On investigating ARP spoofing security solutions
【24h】

On investigating ARP spoofing security solutions

机译：关于调查ARP欺骗安全解决方案

获取原文
获取原文并翻译 | 示例
           
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

The address resolution protocol (ARP) has proven to work well under regular circumstances, but it was not designed to cope with malicious hosts. By performing ARP spoofing attacks, a malicious host can either impersonate another host [man-in-the-middle attack (MiM)] and gain access to sensitive information, or perform denial of service attack (DoS) on target hosts. Several security solutions, such as high-cost LAN switches and intrusion detection or prevention systems (IDS/IPS), are currently used to detect and prevent these attacks. In this paper, we evaluate, through extensive practical experiments, how effective these security solutions are in detecting ARP spoofing. We clearly show that ARP spoofing has not been given enough attention by most common security solutions which lack efficient detection and prevention mechanisms. We then propose an optimal algorithm that is capable of detecting all various ARP spoofing attacks; especially those not detected using the current mechanisms. The suggested algorithm can be easily integrated in any available security solution with very minimal overhead.
机译：事实证明，地址解析协议（ARP）在常规情况下可以很好地工作，但其目的并不是要应对恶意主机。通过执行ARP欺骗攻击，恶意主机可以冒充另一台主机[中间人攻击（MiM）]并获得对敏感信息的访问权，或者对目标主机执行拒绝服务攻击（DoS）。当前使用了几种安全解决方案，例如高成本的LAN交换机和入侵检测或防御系统（IDS / IPS），来检测和预防这些攻击。在本文中，我们通过广泛的实践实验评估了这些安全解决方案在检测ARP欺骗方面的有效性。我们清楚地表明，大多数常见的安全解决方案缺少有效的检测和预防机制，因此ARP欺骗并未得到足够的重视。然后，我们提出了一种能够检测所有各种ARP欺骗攻击的最佳算法。特别是那些使用当前机制未检测到的。可以将所建议的算法轻松集成到任何可用的安全解决方案中，而所需的开销却非常小。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号