Defence Design for ARP Spoofing Based on NDIS Intermediate Driver

摘要

With the rapid development of computer network, there are more and more network security incidents becuase of the defaults of network protocols. ARP spoofing is a terrible one, that makes use of the defaults of ARP protocol to attack network. It destroys the communication between hosts by sending the wrong IP/MAC address. Some security measures can prevent ARP spoofing attacks, but have some constrains. The text designs a method to defend ARP spoofing, which is based on NDIS intermediate driver.