免疫网络是解决ARP最根本的办法
ARP欺骗和攻击问题，是企业网络的心腹大患。用于这个问题的评论现已很深入了，对ARP攻击的机理理解的很透彻，各种防备方法也层出不穷。但问题是，如今真实脱节ARP问题困惑了吗？从用户那里理解到，尽管尝试过各种方法，但这个问题并没有底层管理。因素就在于，现在很多种ARP防备方法，一是管理方法的防备才能有限，并不是最底层的方法。二是对网络管理限制很大，不方便不实用，不具备可操作性。三是某些方法对网络传输的效能有丢失，网速变慢，带宽糟蹋，也不可取。这篇文章通过具体分析一下普遍盛行的四种防备ARP方法，去理解为何ARP问题一直不能完全治愈。并进一步分析在免疫网络的模式下，对ARP是如何完全根除的，为何只要免疫网络可以做到。(ARP spoofing and attack problems are a serious problem for enterprise networks. The commentary on this issue is now very in-depth, the mechanism of ARP attack is well understood, and various defense methods are emerging one after another. But the question is, is the real disjointed ARP problem confused these days? It is understood from users that despite trying various approaches, there is no underlying management of this issue. The reason is that there are many ARP defense methods. First, the preventive ability of management methods is limited, and it is not the lowest-level method. Second, it imposes great restrictions on network management, which is inconvenient and practical, and does not have operability. Third, some methods lose the efficiency of network transmission, slow down the network speed, and waste the bandwidth, which is not desirable. This article analyzes the four commonly prevalent ARP prevention methods in detail to understand why the ARP problem has not been completely cured. And further analyze how ARP is completely eradicated in the mode of immune network, and why only immune network can do it.)
页:
[1]