| With the development of the information age,the network has been accepted by millions of households.Whether areas network architecture or small purchase orders,the network is closely related to people’s lives.Internet brings convenience to people,while network security issues are also produced.Especially in LAN.as an important way that users access the network,the security problems are arousing more and more concerns.ARP,Address Resolution Protocol,is the TCP/IP protocol which helps LAN hosts to obtain the physical address via IP address.The Examples that ARP attacks lead to paralysis of personal hosts,corporate intranet and campus network is countless.Currently,the main ways of defense ARP attacks,such as ARP firewall and switch port security policies,have no accurate positioning,many omissions and false positives,lacks of response strategies and other shortcomings that make these ways be not able to effectively deal with ARP attacks.In order to solve the above problems,this paper designs and implements the LAN ARP attack response system based on safety switch.With using C/S structure,the system can achieve real-time network traffic monitoring and real-time discoveries of ARP attacks,and have the ability to effectively isolate the source of the attack and purify the Internet based on.Net framework.The main features of the system include automatic topology generating,network communicating,switch configuration,network monitoring.WEB remote controlling and so on.Particularly,in order to be able to track and accurately locate the source of ARP attack in time,isolate the source of attack as soon as possible,and effectively inhibit the ARP attack,the system studied and implemented AAL(ARP Attack Locator)algorithm.The system used a network packet capture technology,switch security policy,SOCKET programming and SNMP protocol analysis and other network technologies,and improved system operability by using C#visual programming,multi-threading and Windows message mechanism.According to the software-defined software engineering development process,this paper discussed the system development life-cycle in detail.After the test,the designed and implemented LAN ARP attack response system based on safety switch reached a timely and effective response to a variety of ARP attacks and could isolate the source of the attack and purify the Internet and was proved to have high engineering value. |
