Interactive method for address resolution protocol

Abstract

The invention provides an interactive method for an address resolution protocol. The method comprises the following steps of: 1, a public key and a private key of the equipment are generated and all clients under the equipment obtain the public key of the equipment; 2, when receiving an address resolution protocol request message from the client, the equipment completes the private key signature of the address resolution protocol packet needing to be transferred by using the signature algorithm and transmits the generated signature and the transferred address resolution protocol packet to theclient as an address resolution protocol answer message; and 3, after receiving the address resolution protocol answer message from the equipment, the client determines whether to refresh the addressresolution protocol buffer memory in the client according to the state of the answer message. Therefore, the method can completely prevent ARP spoofing on the equipment supporting the authentication of the ARP under a condition of being compatible with the prior equipment.

Description

technical field [0001] The present invention relates to network security, and more specifically, relates to an address resolution protocol interaction method. Background technique [0002] Ethernet is a broadcasting environment, Address Resolution Protocol (ARP, Address Resolution Protocol) is a protocol on Ethernet that utilizes the IP address of a host to determine its physical address. There is no security mechanism for ARP addresses. Attackers can use counterfeit ARP packets to answer ARP requests, or even actively send counterfeit gratuitous ARP packets, so that the host caches wrong ARP information. Such hosts will send IP packets to illegal MAC addresses, and attackers can achieve the purpose of man-in-the-middle attacks or denial-of-service attacks. [0003] IP and MAC binding tables can be used on network devices to prevent ARP tampering. Static binding is also required on the PC. If you need to change the IP of the host or gateway, you must change the bindings ...

AI Technical Summary

Problems solved by technology

If you need to change the IP of the host or gateway, you must change the binding on all PCs, which will cause a lot of work for the administrator

[0004] During the ARP interaction process, because the ARP protocol itself does not authenticate the two sides of the interaction, the client PC is vulnerable to ARP spoofing attacks

[0005] Some solutions in the existing technology must require all terminals to implement the ARP protocol for authentication. Once there are routers, switches and other devices that cannot support it in the network, the entire solution will be difficult to deploy.

[0006] In the prior art, it is also possible to use the shared key to authenticate each other, but there is a disadvantage that in the case of many clients, the shared key is easy to be lost or stolen, so that the attacker can forge the authentication ARP message

Images