ARP欺骗的解决方案：第2层MAC和协议过滤以及arpserver
A solution for ARP spoofing: Layer-2 MAC and protocol filtering and arpserver
摘要：
大多数攻击都是由同一家公司的员工在公司内部发起的。这些类型的攻击通常针对第2层，而不是第3层或IP。这些攻击滥用了第2层的交换机操作。地址解析协议（ARP）欺骗（有时也称为ARP中毒）是这种攻击的一种。这种攻击被归类为“中间人”（MITM）攻击。通常的安全系统，如（个人）防火墙或病毒防护软件无法识别这种类型的攻击。利用两台主机之间的通信，可以访问机密数据。在网络上运行内部攻击的恶意软件可以在互联网上免费获得，例如Ettercap。本文提出并实现了一种防止ARP欺骗的解决方案。在本提案中，使用了第二层媒体访问控制（MAC）地址和协议过滤的访问控制列表（ACL）以及一个名为ARPserver的应用程序，该应用程序将回复所有ARP请求。
英文摘要：
Most attacks are launched inside the companies by the employees of the same company. These kinds of attacks are generally against layer-2, not against layer-3 or IP. These attacks abuse the switch operation at layer-2. One of the attacks of this kind is Address Resolution Protocol (ARP) Spoofing (sometimes it is called ARP poisoning). This attack is classified as the 'man in the middle' (MITM) attack. The usual security systems such as (personal) firewalls or virus protection software can not recognize this type of attack. Taping into the communication between two hosts one can access the confidential data. Malicious software to run internal attacks on a network is freely available on the Internet, such as Ettercap. In this paper a solution is proposed and implemented to prevent ARP Spoofing. In this proposal access control lists (ACL) for layer-2 Media Access Control (MAC) address and protocol filtering and an application called ARPserver which will reply all ARP requests are used.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
