Equipment access sensing method based on ARP protocol

Abstract

The invention discloses an equipment access sensing method based on an ARP protocol. The method comprises the following steps: blocking an ARP broadcasting function and a response function of a self operating system; constructing a private ARP request message, wherein the private ARP request message is a message which increases a corresponding private mark with a signature based on an original ARP request message; broadcasting the private ARP request message, at the same time, receiving the private ARP request messages transmitted by other host equipment, and returning a private ARP response message; detecting whether the private ARP request messages transmitted by the other host equipment contain the private mark with the signature or not; if the private ARP request messages transmitted by the other host equipment contain the private mark with the signature and the signature is right, judging the other host equipment as legitimate access equipment, and performing normal communication, and if not, judging the other host equipment as illegal access equipment, and blocking the communication of the illegal access equipment; reporting the information of the illegal access equipment to a server. Through the adoption of the method disclosed by the invention, the equipment access can be quickly and timely found, and the communication of the illegal access equipment is effectively stopped.

Description

technical field [0001] The invention relates to the technical field of computer network data communication, in particular to an access identification method based on the ARP protocol. Background technique [0002] With the increasing popularity of the network, all enterprises and institutions have also established their own internal networks. How to identify the devices connected to the internal network in a timely manner, block the communication of illegally connected devices, and protect the information security of the internal network has become a challenge for network management. Problems to be solved. [0003] At present, the commonly used method for device access perception is basically: for illegal device access, the ACL is mainly used to control its network communication. However, through ACL to control the network communication of devices, it is impossible to effectively detect illegal devices masquerading and deceiving legitimate devices. [0004] Wherein, the ad...

AI Technical Summary

Problems solved by technology

However, through ACL to control the network communication of the device, it is impossible to effectively detect the illegal device masquerading and deceiving the legitimate device.

Images