摘要
Snort是一个功能强大的轻量级的NIDS,它能够检测各种不同的攻击方式,并对攻击进行实时警报。然而,Snort对ARP欺骗的检测存在着明显的缺陷,此外,它对ARP欺骗的防御也无能为力。通过扩展Snort预处理插件,增加ARP检测模块,从而实现了对ARP欺骗的预防与检测。
Snort is one of a light weight,powerful NIDS.It can detect many different attack behaviors,and then give a real-time alarm.However,Snort has a clear defect in ARP spoofing detection,and its prevention against ARP spoofing is powerless.By expanding preprocessor plug-ins and adding an ARP detection module,the detection and defense of the ARP spoofing is achieved.
出处
《北京联合大学学报》
CAS
2010年第2期10-13,共4页
Journal of Beijing Union University
基金
国家科技支撑计划项目(2007BAH08B01)
陕西省自然科学基金项目(2005f36)资助
