ARP??

1
ARP??

• ??A0953303
• ?????
• ???????

2
??ARP?

• Address Resolution Protocol ??ARP
• ???????
• ?IP???MAC??????????
• IP???????????,????????????????32????IP??
• ARP??????????????,????????????????
• ????????????????MAC??

3
??ARP?? ?

• ARP??????????Windows????????ARP ?????
• ???????ARP???ARP???????????????????ARP?
• ???(????)???????????
• ?OSI???????????????,??????

4
ARP????

• ??ARP spoofing????????????????????????????????????
  
• ?????(Man-in-the-Middle attack)
• ??ARP???????(Client)????(Server)????????????????
  ????,???????????????

5
ARP????

• ????(Session Hijacking)
• ??ARP??????????????,?????????????????,???????,??
  ??????????ARP??,?????????????

6
ARP?????

• ??????
• ?????????????????,?????????????,??????ARP??
• ??ARP????????????????

7
ARP????

• ?????????
• ?????????

8
?????????

• ????????????????????netcut?? ?????????????????????
  ?
• ????Unicast??????????
• ?????????????,??????????
• ?????????????

9
?????????

• ??????ARP????????????????????,???????????????????,
  ???????????????????

10
??IPS???????ARP??? ?

• ???/IPS?????????????????????????????ARP??,???ARP??
  ????
• ???/IPS??????????????????????,????????????????????
  ????????

11
ARP??????????????

• NBADswitch
• ? ARP????
• ??LAN??arp????
• ? ARP????
• ??LAN??????????????
• ? ARP????
• ???????????,???????

12
ARP??????????????

• NBADsensor
• ???????????????????????(mirror)????(sniffer)????
  ????ARP ????

13
??

• ARP Spoofing Attack???????????????,??ARP??????????
  ?,?broadcast ??Unicast,??????????ARP??????????????
  ????????