[ARP娆洪獥绫荤梾姣掔殑闃插尽]app欺骗的防御措施
銆€銆€鎽樿:鍒╃敤TCP/IP鍗忚瀹夊叏婕忔礊杩涜娆洪獥鏀诲嚮鐨勪簨浠剁粡甯稿彂鐢?鏀诲嚮鑰呭埄鐢ˋRP娆洪獥杩涜鎷掔粷鏈嶅姟鏀诲嚮(DoS)鎴栦腑闂翠汉鏀诲嚮,閫犳垚缃戠粶閫氫俊涓柇鎴栨暟鎹鎴彇鍜岀獪鏀?涓ラ噸褰卞搷缃戠粶鐨勫畨鍏ㄣ€傛湰鏂囬€氳繃ARP鍗忚鍘熺悊鍒嗘瀽鎻ずARP鍗忚娆洪獥,骞跺ARP鐥呮瘨鏀诲嚮鎻愬嚭涓€濂楁湁鏁堝彲琛岀殑闃茬姱鎺柦鍜岃В鍐冲姙娉曘€?
銆€銆€鍏抽敭璇?ARP鍗忚 ARP娆洪獥 ARP鐥呮瘨
銆€銆€
銆€銆€1 寮曡█
銆€銆€ ARP娆洪獥鍏锋湁闅愯斀鎬с€侀殢鏈烘€х殑鐗圭偣,鍦↖nternet涓婇殢澶勫彲涓嬭浇鐨凙RP娆洪獥宸ュ叿浣緼RP娆洪獥鏇村姞鏅亶銆傚埄鐢ˋRP娆洪獥鐨勬湪椹梾姣掑湪灞€鍩熺綉涓箍娉涗紶鎾?缁欑綉缁滃畨鍏ㄨ繍琛屽甫鏉ュ法澶ч殣鎮?鏄眬鍩熺綉瀹夊叏鐨勯瑕佸▉鑳併€傚埄鐢ˋRP鍗忚鐨勭己闄?鍍忓ぇ瑙勬ā鐖嗗彂鐨勬祦琛屾€ф劅鍐掍竴鏍?閫犳垚缃戠粶鏃舵柇鏃剁画,鏃犳硶姝ｅ父涓婄綉銆?
銆€銆€
銆€銆€2 ARP鍗忚姒傝堪
銆€銆€ ARP鍗忚鍏ㄧО涓篈ddress Resolution Protocol,鍗冲湴鍧€瑙ｆ瀽鍗忚,鏄疶CP/IP鍗忚鏍堜腑鐨勫熀纭€鍗忚涔嬩竴,宸ヤ綔浜嶰SI妯″瀷鐨勭浜屽眰,鍦ㄦ湰灞傚拰纭欢鎺ュ彛闂磋繘琛岃仈绯? 鍚屾椂涓轰笂灞?缃戠粶灞? 鎻愪緵鏈嶅姟銆傛槸灏咺P鍦板潃涓庣綉缁滅墿鐞嗗湴鍧€涓€涓€瀵瑰簲鐨勫崗璁?璐熻矗IP鍦板潃鍜岀綉鍗″疄闄呭湴鍧€(MAC)涔嬮棿鐨勮浆鎹€備篃灏辨槸灏嗙綉缁滃眰鍦板潃瑙ｆ瀽涓烘暟鎹摼璺眰鐨凪AC鍦板潃銆傚湪浠ュお缃戜腑,涓€涓綉缁滆澶囪鍜屽彟涓€涓綉缁滆澶囪繘琛岀洿鎺ョ殑閫氫俊,闄や簡鐭ラ亾鐩爣璁惧鐨処P鍦板潃澶?杩樿鐭ラ亾鐩爣璁惧鐨凪AC鍦板潃銆侫RP鍗忚鐨勫熀鏈姛鑳藉氨鏄€氳繃鐩爣璁惧鐨処P鍦板潃,鏌ヨ鐩爣璁惧鐨凪AC鍦板潃,浠ヤ繚璇侀€氳鐨勯『鍒╄繘琛屻€傚綋涓€涓綉缁滆澶囬渶瑕佸拰鍙︿竴涓綉缁滆澶囬€氫俊鏃?瀹冮鍏堟妸鐩爣璁惧鐨処P鍦板潃涓庤嚜宸卞瓙缃戞帺鐮佽繘琛屸€滀笌鈥濇搷浣?浠ュ垽鏂洰鏍囪澶囦笌鑷繁鏄惁浣嶄簬鍚屼竴缃戞鍐?濡傛灉鐩爣璁惧涓庢簮璁惧鍦ㄥ悓涓€缃戞鍐?鍒欐簮璁惧浠ョ浜屽眰骞挎挱鐨勫舰寮忓彂閫丄RP璇锋眰鎶ユ枃,鍦ˋRP璇锋眰鎶ユ枃涓寘鍚簡婧愯澶囦笌鐩爣璁惧鐨処P鍦板潃銆傚鏋滅洰鏍囪澶囦笌婧愯澶囦笉鍦ㄥ悓涓€缃戞,鍒欐簮璁惧棣栧厛鎶奍P鍒嗙粍鍙戝悜鑷繁鐨勭己鐪佺綉鍏?鐢辩己鐪佺綉鍏冲璇ュ垎缁勮繘琛岃浆鍙戙€?
銆€銆€
銆€銆€3 ARP鍗忚鐨勭己闄?
銆€銆€ 涓绘満ARP鍒楄〃鏄熀浜庨珮閫熺紦瀛樺姩鎬佹洿鏂扮殑銆傜敱浜庢甯哥殑涓绘満闂寸殑MAC鍦板潃鍒锋柊閮芥槸鏈夋椂闄愮殑,杩欐牱鎭舵剰鐢ㄦ埛濡傛灉鍦ㄤ笅娆′氦鎹箣鍓嶆垚鍔熷湴淇敼浜嗚娆洪獥鏈哄櫒涓婄殑鍦板潃缂撳瓨,灏卞彲浠ヨ繘琛屽亣鍐掓垨鎷掔粷鏈嶅姟鏀诲嚮銆傚彲浠ラ殢鎰忓彂閫丄RP搴旂瓟鍒嗙粍銆傜敱浜嶢RP鍗忚鏄棤鐘舵€佺殑,浠讳綍涓绘満鍗充娇鍦ㄦ病鏈夎姹傜殑鏃跺€欎篃鍙互鍋氬嚭搴旂瓟銆傚洜姝や换浣曟椂鍊欏彂閫丄RP搴旂瓟銆傚彧瑕佸簲绛斿垎缁勬槸鏈夋晥鐨?鎺ユ敹鍒癆RP搴旂瓟鍒嗙粍鐨勪富鏈哄氨鏃犳潯浠跺湴鏍规嵁搴旂瓟鍒嗙粍鐨勫唴瀹瑰埛鏂版湰鏈洪珮閫熺紦瀛樸€?
銆€銆€
銆€銆€4 ARP鐨勪富瑕佹敾鍑荤被鍨?
銆€銆€ ARP鏈熼獥鏄寚鍒╃敤ARP鍗忚鐨勬紡娲?閫氳繃鍚戠洰鏍囪澶囦富鏈哄彂閫佽櫄鍋囩殑ARP鎶ユ枃,杈惧埌鐩戝惉鎴栬€呮埅鑾风洰鏍囦富鏈烘暟鎹殑鏀诲嚮鎵嬫銆?
銆€銆€4.1 鍐掑厖涓绘満娆洪獥缃戝叧
銆€銆€ 鏀诲嚮涓绘満C鍙戝嚭涓€涓姤鏂?鍏朵腑婧怣AC鍦板潃涓篗AC C,婧怚P鍦板潃涓篒P A銆傝繖鏍蜂换浣曞彂寰€涓绘満A鐨勬姤鏂囬兘浼氳鍙戝線鏀诲嚮涓绘満C銆傜綉鍏虫棤娉曚笌鐪熷疄涓绘満A鐩存帴閫氫俊銆?
銆€銆€4.2 鍐掑厖缃戝叧娆洪獥涓绘満
銆€銆€ 鍦ㄤ富鍔ㄦ敾鍑讳腑,鏀诲嚮鑰匔涓诲姩鍚慉鍙戦€丄RP 搴旂瓟鏁版嵁鍖?鍛婅瘔A,B(缃戝叧)鐨処P鍦板潃鎵€瀵瑰簲鐨凪AC鍦板潃鏄疌C-CC-CC-CC-CC-CC,浠庤€屼娇寰桝淇敼鑷繁鐨凙RP鍒楄〃,鎶夿鐨処P鍦板潃瀵瑰簲鐨凪AC鍦板潃淇敼涓烘敾鍑昏€匔鐨凪AC鍦板潃銆傚悓鏃?鏀诲嚮鑰匔 涔熶富鍔ㄥ悜B鍙戦€丄RP搴旂瓟鏁版嵁鍖?鍛婅瘔B,A鐨処P鍦板潃鎵€瀵瑰簲鐨凪AC 鍦板潃鏄疌C-CC-CC-CC-CC-CC,浣緽淇敼鑷繁鐨凙RP鍒楄〃,鎶夾鐨処P鍦板潃瀵瑰簲鐨凪AC鍦板潃淇敼涓烘敾鍑昏€匔鐨凪AC鍦板潃銆?
銆€銆€ A鈫愨啋B涔嬮棿鐨勯€氫俊褰㈠紡鍙樻垚A鈫愨啋C鈫愨啋B,瀹炵幇浜嗕腑闂翠汉鏀诲嚮銆傚湪琚姩鏀诲嚮涓?鏀诲嚮鑰匔鍙湪A鎴栬€匓鍙戦€丄RP璇锋眰鏁版嵁鍖呮椂,寤舵椂涓€娈垫椂闂村彂閫佸簲绛旀暟鎹寘,浣垮緱鑷繁鐨勫簲绛斿寘鍦ㄦ纭殑搴旂瓟鍖呬箣鍚庡埌杈?闃叉鑷繁淇敼鐨勭浉搴斾富鏈虹殑ARP 鍒楄〃琚纭殑搴旂瓟鍖呭啀娆′慨鏀广€傞偅涔堜富鏈篈鍙戝線缃戝叧B鐨勬姤鏂囬兘浼氳鍙戝線鏀诲嚮涓绘満C,閫犳垚涓绘満A绐佺劧鏂綉銆?
銆€銆€
銆€銆€5 ARP娆洪獥闃茶寖鍜岃В鍐虫柟妗?
銆€銆€5.1 鎵嬪姩闃插尽
銆€銆€ 闃插尽ARP娆洪獥鐨勭畝鍗曟柟娉曟槸缃戠粶绠＄悊鍛樺垎鍒湪涓绘満鍜岃矾鐢卞櫒涓婇潤鎬佺粦瀹氬湴鍧€鏄犲皠銆傞€氳繃arp-s鍛戒护,鍦≒C涓婄粦瀹氱綉鍏崇殑MAC鍜孖P鍦板潃,杩欐牱鍙互闃插尽鍐掑厖缃戝叧娆洪獥涓绘満鐨凙RP娆洪獥銆傚彟涓€绉嶆墜鍔ㄩ槻寰℃柟娉曟槸鍦ㄥ眬鍩熺綉涓鍔燰LAN鐨勬暟鐩?鍑忓皯VLAN涓殑涓绘満鏁伴噺銆傚眬鍩熺綉绠＄悊鍛樺彲浠ユ牴鎹湰鍗曚綅鐨勭綉缁滄嫇鎵戠粨鏋勫垝鍒嗚嫢骞蹭釜VLAN,杩欐牱鏃㈣兘澶熷湪鍙戠敓ARP鏀诲嚮鏃跺噺灏戞墍褰卞搷鐨勭綉缁滆寖鍥?鍙堣兘澶熷湪鍙戠敓ARP鏀诲嚮鏃朵究浜庡畾浣嶅嚭鐜扮殑缃戞鍜屽叿浣撶殑涓绘満銆傜己鐐瑰悓鏍锋槸澧炲姞浜嗙綉缁滅淮鎶ょ殑澶嶆潅搴?涔熸棤娉曡嚜鍔ㄩ€傚簲缃戠粶鐨勫姩鎬佸彉鍖栥€?
銆€銆€5.2 浣跨敤ARP鏈嶅姟鍣?
銆€銆€ 鍦ㄥ眬鍩熺綉鍐呴儴鐨勮缃竴鍙版満鍣ㄤ綔涓篈SP鏈嶅姟鍣?涓撻棬淇濆瓨骞朵笖缁存姢缃戠粶鍐呯殑鎵€鏈変富鏈虹殑IP鍦板潃涓嶮AC鍦板潃鏄犲皠璁板綍,浣垮叾浠栬绠楁満鐨凙RP閰嶇疆鍙帴鍙楁潵鑷狝RP鏈嶅姟鍣ㄧ殑ARP鍝嶅簲銆傚綋鏈堿RP璇锋眰鏃惰鏈嶅姟鍣ㄩ€氳繃鏌ラ槄鑷繁缂撳瓨鐨勯潤鎬佽褰曞苟浠ヨ鏌ヨ涓绘満鐨勫悕涔夊搷搴擜RP灞€鍩熺綉鍐呴儴鐨勮姹?浠庤€岄槻姝簡ARP娆洪獥鏀诲嚮鐨勫彂鐢熴€備絾鏄繖涓柟娉曚篃鏈変笉瓒?棣栧厛瑕佷繚璇丄RP鏈嶅姟鍣ㄤ笉琚敾鍑?纭繚ARP鏈嶅姟鍣ㄧ殑瀹夊叏;鍏舵瑕佷繚璇佷富鏈哄彧鎺ュ彈鎸囧畾ARP鏈嶅姟鍣ㄧ殑ARP鍝嶅簲鎶ユ枃銆傚浣曞仛鍒拌繖涓€鐐?鐩墠杩樻槸姣旇緝鍥伴毦鐨勩€?
銆€銆€5.3 ARP娆洪獥鐨勮В鍐虫帾鏂?
銆€銆€ 鏌愯绠楁満鎵€澶勭綉娈电殑璺敱IP鍦板潃涓簒x.xx.xx.1,鏈満鍦板潃涓簒x.xx.xx.8,鍦ㄨ绠楁満涓奃OS鍛戒护琛屼腑杩愯arp-a鍚庤緭鍑哄涓?
銆€銆€ C:\Documents and Settings\Administrator>arp-a
銆€銆€ Interface:xx.xx.xx.8---0x10003
銆€銆€ Internet Address Physical AddressType
銆€銆€ xx.xx.xx.100-01-02-03-04-05dynamic
銆€銆€ 鍏朵腑,00-01-02-03-04-05灏辨槸璺敱鍣▁x.xx.xx.1瀵瑰簲鐨凪AC鍦板潃,绫诲瀷涓哄姩鎬?鍥犳鍙鏀瑰彉銆傛甯告儏鍐典笅,xx.xx.xx.1鍜?0-01-02-03-04-05濮嬬粓瀵瑰簲銆傝鏀诲嚮鍚?閲嶅浣跨敤璇ュ懡浠ゆ煡鐪?灏变細鍙戠幇璇AC宸茬粡琚浛鎹㈡垚鏀诲嚮鏈哄櫒鐨凪AC,鑰屼笖鏀诲嚮鏈哄櫒鐨凪AC鍦板潃鍜岀湡姝ｇ殑缃戝叧MAC鍦板潃浼氬嚭鐜颁氦鏇跨幇璞°€?
銆€銆€
銆€銆€6 缁撹
銆€銆€ 閫氳繃浠ヤ笂鏂规硶瑙ｅ喅ARP鐥呮瘨瀵逛簬灞€鍩熺綉鐨勬楠楁敾鍑绘槸姣旇緝鏈夋晥鏋滅殑銆備絾鏄敱浜嶢RP鐥呮瘨鐗堟湰鍦ㄤ笉鏂洿鏂板崌绾т腑,鎵€浠ヤ粛浼氱粰灞€鍩熺綉鐢ㄦ埛甯︽潵鏂扮殑鍐插嚮涓庡嵄瀹炽€傚洜姝ゆ湁蹇呰鎻愬墠鍋氬ソ灞€鍩熺綉ARP鐥呮瘨鐨勯槻鑼冨伐浣?浣垮緱ARP鐥呮瘨鐨勫嵄瀹冲噺灏戝埌鏈€灏忕▼搴︺€傚湪缃戠粶瀹夊叏棰嗗煙,娌℃湁浠讳綍涓€绉嶆妧鏈墜娈靛彲浠ヨВ鍐虫墍鏈夌殑闂,瀵逛簬鍚勭绫诲瀷鐨勭綉缁滄敾鍑?缁忓父鏌ョ湅褰撳墠鐨勭綉缁滅姸鎬?瀵圭綉缁滄椿鍔ㄨ繘琛屽垎鏋愩€佺洃鎺с€侀噰鍙栫Н鏋併€佷富鍔ㄧ殑闃插尽琛屽姩鏄繚璇佺綉缁滃畨鍏ㄥ拰鐣呴€氱殑閲嶈鏂规硶銆傜綉缁滅鐞嗗憳搴斿綋瀵嗗垏妫€鏌ョ綉缁?涓嶆柇鎻愰珮鑷韩鐨勬妧鏈按骞?纭繚缃戠粶瀹夊叏鐨勬甯歌繍琛屻€?
銆€銆€
銆€銆€鍙傝€冩枃鐚?
銆€銆€[1] 寮犺儨浼?鍩轰簬DAI鐨凙RP娆洪獥娣卞害闃插尽[J].璁＄畻鏈哄畨鍏?2009,(01).
銆€銆€[2] 鏉庢柊.ARP娆洪獥闃插尽鎶€鏈殑鐮旂┒[J].鍟嗗満鐜颁唬鍖?2008(36).
銆€銆€[3] 闄堝ぉ娲?闄堢函,璋峰皬濡瓑.璁＄畻鏈哄畨鍏ㄧ瓥鐣M].娴欐睙澶у瀛︽姤,2004骞?
鏈枃涓哄叏鏂囧師璨?鏈畨瑁匬DF娴忚鍣ㄧ敤鎴疯鍏堜笅杞藉畨瑁?鍘熺増鍏ㄦ枃