Dissertation > Excellent graduate degree dissertation topics show
Implementation to ARP Protection Based on NIDS Driver
Author: XuDongBin
Tutor: LiZhiHuai
School: Dalian Maritime University
Course: Computer Science and Technology
Keywords: ARP protocol ARP spoofing NDIS intermediate driver Passthru routine ARP filtering
CLC: TP393.08
Type: Master's thesis
Year: 2010
Downloads: 125
Quote: 1
Read: Download Dissertation
Abstract
|
In recent years, with the rapid development of computer network , network security incidents caused by the network protocol vulnerabilities are increasingly frequent , ARP spoofing attack is one of the more serious kind of network security issues , which uses ARP protocol vulnerability to network deception and attack . How to defend against ARP spoofing attacks become a hot research topic of network security community , a variety of defensive methods , but these methods have a lot of constraints, can not be a good solution to the problem of ARP spoofing ARP spoofing . This article will discuss this issue , and using NDIS intermediate driver is given the ARP packets effectively blocking the defense . The article first introduces the research status quo at home and abroad ARP spoofing ARP protocol is and how it works , and then analyzed to find the ARP protocol vulnerabilities . Secondly, for ARP spoofing attack defense , the prevention and detection features , Detailed ARP spoofing process , finally found a solution for ARP insufficient : the problem lies in the packet Receive detected sufficiently standardized and security . For lack of ideas ARP spoofing protection : NDIS intermediate layer packet capture flow through , and then passes the data to copy the packet module , and then remove the packets in sequence from the module queue , and add in filtering rules on the NDIS intermediate driver to compare the conditions are met by , does not meet the conditions it is filtered out . During the execution of the NDIS intermediate driver is controlled by the user program , the user program to achieve intermediate driver interaction through function calls , control the start of the driver stop operation, the ARP packet filtering . The driver and the user program in a lab environment ARP packet filtering test , test results show that the system can prevent ARP spoofing , and little impact on the performance of the machine , from the cost , feasibility, efficiency, integrated consider , you can better prevent ARP spoofing .
|
Related Dissertations
- ARP Spoofing Defense System Design and Implementation,TP393.08
- Remote Network Monitoring System Based on FPGA,TP277
- The Analysis and Defence of ARP Protocol Cheating,TP393.08
- Packet classification algorithm based on the the NDIS intermediate Windows platform under,TP393.08
- Trusted Network Security Access Control Enterprise Architecture Research and Implementation,TP393.08
- Research and Design of Desktop Firewall Based on Microsoft Windows,TP393.08
- The Research of Text Content Network Behavior Analysis System,TP393.09
- The Research of Bypass Network Behavior Monitoring System,TP393.08
- Research on ARP Spoofing and Implementation of Security Solution for ARP,TP393.08
- Based on NDIS intermediate driver model for network data encryption,TP393.08
- Research and Implementation of P2P Flow Identification and Control,TP393.08
- Research of Defending ARP Spoofing Attacks Based on Winpcap,TP393.08
- The Application of Sniffing to ARP Attack Detection,TP393.08
- The ARP protocol analysis and network security to achieve,TP393.08
- Research and Implementation of Transparent Network Security Technology Based on IP Security,TP393.08
- Design and implementation of state filtering host firewall,TP393.08
- Based-on-linux Management System for Network Address,TP393.07
- Windows CE.NET platform packet filtering based on NDIS intermediate driver program design and Implementation,TP393.08
- Design and Implementation of the transmission system of the People's Bank Intranet security,TP393.08
- Design and Realization of Personal Firewall Working on Windows2000 Platform,TP393.08
CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net Mobile
|