地址解析协议攻击后网络数据防泄漏方法

摘要

防止敏感数据泄露是网络服务商面临的主要问题;随着网络的逐渐发展,该问题变得越来越复杂.传统数据防泄漏方法通常通过关键词搜索实现,虚警率高、整体性能低下.为此,提出一种新的地址解析协议(ARP)攻击后网络数据防泄漏方法.通过动态指纹检测对ARP攻击后存在网络隐患的敏感数据进行初步检测,通过概率检测降低计算开销和内存.针对指纹比对,在随机选择的一组整数上对字符串进行检测,将检测点和Bloom滤波器关联,给出通过概率检测进行网络数据泄露检测的详细过程,从而防止ARP攻击后网络数据泄露.实验结果表明,所提方法不仅精度高,而且整体性能强.%To prevent the leakage of sensitive data is the main problem of network service providers .With the gradual development of the network , the problem becomes more and more complex , the traditional data leakage prevention methods usually by keyword search to achieve the high false alarm rate , poor overall performance . Therefore, a new ARP attack network data leakage prevention method was proposed , through dynamic fingerprint detection and preliminary detection of sensitive data network hidden danger of ARP after the attack , reduce the computational overhead and memory through probability detection .For fingerprint matching , string detection in a set of integer random selection , detection point and Bloom correlation filter , gives detailed process of network data leakage detection by the probability of detection , so as to prevent data leakage attacks ARP network .The experi-mental results show that the proposed method not only has high accuracy , but also has strong overall performance .