CN104796423A - Arp双向主动防御方法 - Google Patents
Arp双向主动防御方法 Download PDFInfo
- Publication number
- CN104796423A CN104796423A CN201510205157.2A CN201510205157A CN104796423A CN 104796423 A CN104796423 A CN 104796423A CN 201510205157 A CN201510205157 A CN 201510205157A CN 104796423 A CN104796423 A CN 104796423A
- Authority
- CN
- China
- Prior art keywords
- arp
- main frame
- packet
- hosts
- gateway
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 36
- 230000007123 defense Effects 0.000 title claims abstract description 15
- 230000002457 bidirectional effect Effects 0.000 title abstract 5
- 238000001914 filtration Methods 0.000 claims abstract description 16
- 230000002159 abnormal effect Effects 0.000 claims abstract description 8
- 230000005540 biological transmission Effects 0.000 claims description 9
- 239000000284 extract Substances 0.000 claims description 5
- 238000012790 confirmation Methods 0.000 claims description 2
- 230000003993 interaction Effects 0.000 abstract 1
- 206010033799 Paralysis Diseases 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000000605 extraction Methods 0.000 description 1
- 230000002265 prevention Effects 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/09—Mapping addresses
- H04L61/10—Mapping addresses of different types
- H04L61/103—Mapping addresses of different types across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
- H04L63/0227—Filtering policies
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1441—Countermeasures against malicious traffic
- H04L63/1466—Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
- Computer And Data Communications (AREA)
Abstract
Description
Claims (4)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201510205157.2A CN104796423B (zh) | 2015-04-28 | 2015-04-28 | Arp双向主动防御方法 |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201510205157.2A CN104796423B (zh) | 2015-04-28 | 2015-04-28 | Arp双向主动防御方法 |
Publications (2)
Publication Number | Publication Date |
---|---|
CN104796423A true CN104796423A (zh) | 2015-07-22 |
CN104796423B CN104796423B (zh) | 2018-04-20 |
Family
ID=53560935
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201510205157.2A Active CN104796423B (zh) | 2015-04-28 | 2015-04-28 | Arp双向主动防御方法 |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN104796423B (zh) |
Cited By (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN106302525A (zh) * | 2016-09-27 | 2017-01-04 | 黄小勇 | 一种基于伪装的网络空间安全防御方法及系统 |
CN106470127A (zh) * | 2015-08-18 | 2017-03-01 | 中兴通讯股份有限公司 | 一种网络异常流量的检测方法及系统 |
CN108512816A (zh) * | 2017-02-28 | 2018-09-07 | 中国移动通信集团广东有限公司 | 一种流量劫持的检测方法及装置 |
CN109981603A (zh) * | 2019-03-07 | 2019-07-05 | 北京华安普特网络科技有限公司 | Arp攻击监测系统及方法 |
CN110022303A (zh) * | 2019-03-07 | 2019-07-16 | 北京华安普特网络科技有限公司 | Arp双向防御系统及方法 |
CN111181850A (zh) * | 2019-08-12 | 2020-05-19 | 腾讯科技(深圳)有限公司 | 数据包泛洪抑制方法、装置和设备及计算机存储介质 |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20040078485A1 (en) * | 2002-10-18 | 2004-04-22 | Nokia Corporation | Method and apparatus for providing automatic ingress filtering |
CN101179566A (zh) * | 2007-11-24 | 2008-05-14 | 华为技术有限公司 | 一种防御arp报文攻击的方法和装置 |
CN102546658A (zh) * | 2012-02-20 | 2012-07-04 | 神州数码网络(北京)有限公司 | 一种防止网关arp欺骗的方法和系统 |
-
2015
- 2015-04-28 CN CN201510205157.2A patent/CN104796423B/zh active Active
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20040078485A1 (en) * | 2002-10-18 | 2004-04-22 | Nokia Corporation | Method and apparatus for providing automatic ingress filtering |
CN101179566A (zh) * | 2007-11-24 | 2008-05-14 | 华为技术有限公司 | 一种防御arp报文攻击的方法和装置 |
CN102546658A (zh) * | 2012-02-20 | 2012-07-04 | 神州数码网络(北京)有限公司 | 一种防止网关arp欺骗的方法和系统 |
Cited By (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN106470127A (zh) * | 2015-08-18 | 2017-03-01 | 中兴通讯股份有限公司 | 一种网络异常流量的检测方法及系统 |
CN106302525A (zh) * | 2016-09-27 | 2017-01-04 | 黄小勇 | 一种基于伪装的网络空间安全防御方法及系统 |
CN106302525B (zh) * | 2016-09-27 | 2021-02-02 | 黄小勇 | 一种基于伪装的网络空间安全防御方法及系统 |
CN108512816A (zh) * | 2017-02-28 | 2018-09-07 | 中国移动通信集团广东有限公司 | 一种流量劫持的检测方法及装置 |
CN108512816B (zh) * | 2017-02-28 | 2021-04-27 | 中国移动通信集团广东有限公司 | 一种流量劫持的检测方法及装置 |
CN109981603A (zh) * | 2019-03-07 | 2019-07-05 | 北京华安普特网络科技有限公司 | Arp攻击监测系统及方法 |
CN110022303A (zh) * | 2019-03-07 | 2019-07-16 | 北京华安普特网络科技有限公司 | Arp双向防御系统及方法 |
CN110022303B (zh) * | 2019-03-07 | 2021-11-16 | 北京华安普特网络科技有限公司 | Arp双向防御系统及方法 |
CN111181850A (zh) * | 2019-08-12 | 2020-05-19 | 腾讯科技(深圳)有限公司 | 数据包泛洪抑制方法、装置和设备及计算机存储介质 |
CN111181850B (zh) * | 2019-08-12 | 2022-03-11 | 腾讯科技(深圳)有限公司 | 数据包泛洪抑制方法、装置和设备及计算机存储介质 |
Also Published As
Publication number | Publication date |
---|---|
CN104796423B (zh) | 2018-04-20 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN104796423A (zh) | Arp双向主动防御方法 | |
WO2021008028A1 (zh) | 网络攻击源定位及防护方法、电子设备及计算机存储介质 | |
WO2017148263A1 (zh) | 网络攻击的防控方法、装置及系统 | |
JP5826920B2 (ja) | 遮断サーバを用いたスプーフィング攻撃に対する防御方法 | |
CN104639504B (zh) | 网络协同防御方法、装置和系统 | |
CN101415012B (zh) | 一种防御地址解析协议报文攻击的方法和系统 | |
EP3355514B1 (en) | Method and device for transmitting network attack defense policy and method and device for defending against network attack | |
CN105721457B (zh) | 基于动态变换的网络安全防御系统和网络安全防御方法 | |
CN101483515B (zh) | Dhcp攻击防护方法和客户端设备 | |
KR100996288B1 (ko) | 가상 mac 주소를 이용하여 arp 스푸핑 공격에 대응하는 방법 | |
CN105812318B (zh) | 用于在网络中防止攻击的方法、控制器和系统 | |
Foroushani et al. | TDFA: traceback-based defense against DDoS flooding attacks | |
CN104247332A (zh) | 涉及虚拟机流量防火墙的系统和处理与虚拟机流量防火墙相关的信息的方法 | |
WO2011079669A1 (zh) | 网络攻击防护方法、设备及系统 | |
CN106453376B (zh) | 一种基于tcp包特征的无状态扫描过滤方法 | |
CN101257450A (zh) | 网络安全防护方法、网关设备、客户端及网络系统 | |
CN106302525B (zh) | 一种基于伪装的网络空间安全防御方法及系统 | |
CN101383812A (zh) | 基于活动IP记录的IP欺骗DDoS攻击防御方法 | |
CN101459653A (zh) | 基于Snooping技术的防止DHCP报文攻击的方法 | |
JP4602158B2 (ja) | サーバ装置保護システム | |
JP6932375B2 (ja) | 通信装置 | |
CN101494536B (zh) | 一种防arp攻击的方法、装置和系统 | |
CN109005164A (zh) | 一种网络系统、设备、网络数据交互方法及存储介质 | |
CN113014530B (zh) | Arp欺骗攻击防范方法及系统 | |
Salim et al. | Preventing ARP spoofing attacks through gratuitous decision packet |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
EXSB | Decision made by sipo to initiate substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
CB02 | Change of applicant information |
Address after: Fourth Mawei District, Fujian, Mawei District, the library of the second floor (FTA test area), 350000, Fuzhou Applicant after: FUJIAN LIUREN NETWORK SECURITY Co.,Ltd. Address before: No. 188 Taiwan AD Creative Park in Fuzhou city of Fujian Province, Xiufeng road 350012 4 Building 3 layer Applicant before: FUJIAN LIUREN NETWORK SECURITY Co.,Ltd. |
|
COR | Change of bibliographic data | ||
GR01 | Patent grant | ||
GR01 | Patent grant | ||
TR01 | Transfer of patent right |
Effective date of registration: 20240321 Address after: F7-118, 6th Floor, Shenya Building, No. 47 Guomao Road, Longhua District, Haikou City, Hainan Province, 570100 Patentee after: Haikou Bomei Network Technology Co.,Ltd. Country or region after: China Address before: 350000 floor 4, Mawei library, Mawei District, Fuzhou City, Fujian Province (in the pilot Free Trade Zone) Patentee before: FUJIAN LIUREN NETWORK SECURITY Co.,Ltd. Country or region before: China |
|
TR01 | Transfer of patent right | ||
TR01 | Transfer of patent right |
Effective date of registration: 20240710 Address after: Store No. 01, Shuxiang Lingyu, No.8 Qiuyang East Road, Shangjie Town, Minhou County, Fuzhou City, Fujian Province, China 350100 Patentee after: Fuzhou Fenglin Tianbao Information Technology Co.,Ltd. Country or region after: China Address before: F7-118, 6th Floor, Shenya Building, No. 47 Guomao Road, Longhua District, Haikou City, Hainan Province, 570100 Patentee before: Haikou Bomei Network Technology Co.,Ltd. Country or region before: China |
|
TR01 | Transfer of patent right |