Campus Network Arp Attack Detection System Design And Development

In order to transmit a message on Internet, we need to know MAC address of the host, so there exists a problem to transform the IP address into the MAC address, and the ARP (Address Resolution Protocol) has such functions. Due to the current situation of campus network’s safe protections are relatively weak in general. The campus network sometimes cannot run smoothly or even crash, which can easily be done by the destroyer through the ARP exploit to tamper or invade the campus network. This indeed has become a vital important problem to solve for the security of the campus network.The dissertation introduces the theory and the damage of ARP attacks. According to mutations in the ARP packets in the network transmission that ARP attacks will lead to, through the real-time monitoring campus network transmission flow of ARP bag and set up a corresponding change flow prediction model to timely find the ARP attack, issuing a warning signal and positioning the attacking-host to reduce the work stress of maintaining the campus network.The dissertation studies and discusses the implementation process of invading a detection system, expounds the misuse of intrusion detection and exception intrusion detection. And the focus is the use of the real-time monitored data of network flow, which is set up ARMA network flow prediction model-the model by analyzing its autocorrelation coefficient. Then we proposed the initial estimation method of ARMA model parameter and analyzed the features of ARMA model.And then the dissertation expounds the thinking of system design, the main function of module, alarm processing and the implementation of the main functions and testing, the design of main interface, all these above by using the test that the system can realize real-time monitoring of ARP flow changes in campus network, which contributes to improving the campus network management and information security standards.