CAJ | 학술논문

内网的优势在于其内部的机器并不直接暴露在互联网中，外网的机器不能直接连接内网的机器，由于信任关系，内网包含的信息更多、更敏感，因此内网中的信息是很多网络黑客觊觎的目标。但是因内部网络起到了一层保护作用，导致人们对内网安全重视不足，防御机制普遍薄弱。通过分析内网中ARP欺骗、DNS欺骗与技术型社会工程学攻击，以案例分析的方式，阐述一种内网中较主动的信息窃取方式--内网钓鱼，最后提出相应防御措施。
내망적우세재우기내부적궤기병불직접폭로재호련망중，외망적궤기불능직접련접내망적궤기，유우신임관계，내망포함적신식경다、경민감，인차내망중적신식시흔다망락흑객기유적목표。단시인내부망락기도료일층보호작용，도치인문대내망안전중시불족，방어궤제보편박약。통과분석내망중ARP기편、DNS기편여기술형사회공정학공격，이안례분석적방식，천술일충내망중교주동적신식절취방식--내망조어，최후제출상응방어조시。
The advantage of LAN(local area network) is that the machines in it are not directly exposed to the Internet, a ma-chine outside the LAN can not directly connect to the LAN's machines.Because of the relationship of trust, information con-tained within the LAN is more sensitive, which is what many hackers desire. However, due to the protection of the LAN, it re-sults in insufficient attention to internal network security and weak defense mechanisms . Through the analysis of network ARP spoofing, DNS spoofing and technology-based social engineering attack,a case study approach to explain a more proactive ap-proach to steal information in the LAN-phishing within the network, and finally present serval solutions against such attacks.