2 results about "ARP spoofing" patented technology

This application relates to a secure communication method, apparatus, air conditioner, and storage medium. The method includes: acquiring a data frame to be sent, counting the data frames already sent to obtain the number of sent frames, determining a sending communication interface from multiple candidate communication interfaces based on the number of sent frames, and sending the data frame to be sent to the receiving end through the sending communication interface. By counting the sent data frames to determine the corresponding sending communication interface, this method can solve the technical problem that existing encrypted communication technologies often use a single communication interface for data transmission. When this communication interface is attacked by man-in-the-middle attacks such as ARP spoofing or SSL stripping, or is eavesdropped by unauthorized devices, attackers can directly intercept the transmitted ciphertext and even crack the key through protocol vulnerabilities, leading to a complete failure of communication security and reliability.

This disclosure provides an Address Resolution Protocol (ARP) attack detection method and system, comprising: sending probe data packets to key network nodes from a host and calculating the round-trip time; determining whether network behavior is abnormal based on the round-trip time; if so, extracting the mapping relationship; obtaining a legitimate mapping benchmark; determining whether the MAC addresses corresponding to the IP addresses are consistent; if so, continuing periodic probing; otherwise, marking cached entries as suspicious infected entries; constructing and sending ARP request data packets to the network based on the IP addresses corresponding to the suspicious infected entries; receiving the ARP request data packets and performing consistency verification; determining whether the consistency verification result contains ARP spoofing attack behavior; if so, performing overwrite repair and converting the repaired entries into static entries; otherwise, continuing periodic probing; otherwise, sending the probe data packets to the key network nodes.