The detection and prevention for ARP Spoofing based on Snort

摘要：

As one of powerful and light weight Network Intrusion Detection System, Snort has good expansibility and transplantability, and can be used in various environments. However, Snort has clear deficiency on ARP spoofing detection, and its own ARP spoofing defense is powerless. To realize the detection and prevention of the ARP spoofing, the paper expanded the snort preprocessor plug-ins by adding an ARP detection module. Results shows this way can make Snort sniffer itself has immunity, and make locate the attacker more timely and accurately.

关键词： ARP ARP spoofing snort

作者: Xiangning HOU Zhiping JIANG Xinli TIAN

作者单位: Department of Computer Science, College of Engineering and Technical, Cheng du University of Technology, Le shan, 614007, China

会议类型: 国际会议

会议名称: The 2010 International Conference on Computer Application and System Modeling(2010计算机应用与系统建模国际会议 ICCASM 2010)

会议地点: 太原

会议语种:英文

页码: 137-139

在线出版日期: 2010-10-22（万方平台首次上网日期，不代表论文的发表时间）