CAJ | 학술논문

针对企事业内部网络中存在的非法主机接入网络产生的安全问题,设计了一种基于ARP协议的非法主机接入监测系统.在该系统中,通过底层驱动阻断操作系统ARP的收发,构造具有签名的私有ARP实现主机接入的监视及非法接入主机的识别和网络通信阻断.实验结果表明,该系统可以感知并识别非法接入的设备,阻断非法设备的通信,并可识别非法构造的ARP主机.通过该系统可以快速、及时发现非法接入设备,降低非法设备的存活时间.
침대기사업내부망락중존재적비법주궤접입망락산생적안전문제,설계료일충기우ARP협의적비법주궤접입감측계통.재해계통중,통과저층구동조단조작계통ARP적수발,구조구유첨명적사유ARP실현주궤접입적감시급비법접입주궤적식별화망락통신조단.실험결과표명,해계통가이감지병식별비법접입적설비,조단비법설비적통신,병가식별비법구조적ARP주궤.통과해계통가이쾌속、급시발현비법접입설비,강저비법설비적존활시간.
An ARP-based monitoring system against illegal hosts connection was designed to solve the security problems caused by illegal hosts access to the internal network of enterprises. In this system,by means of the communication of ARP in bottom driven interdiction operating system,the privately-owned ARP with signature was constructed to achieve the purpose of monitoring the hosts access,recognizing and interdicting the illegal access hosts. The experiment result show that the system can perceived illegal host access and block its communication. Meanwhile,the ARP hosts with illegal signature can be recognized. The illegally-accessed hosts can be perceived immediately by this system,which can reduce the survival time of illegal equip-ments.