无线网络的ARP中毒检测系统 [英] ARP POISONING DETECTION SYSTEM FOR WIRELESS NETWORK
问题描述
嗨！伙计们，我想获得有关如何创建可在客户端计算机上检测到ARP毒害的应用程序的帮助，该系统的目的是为访问wi-fi网络的用户提供服务，例如在咖啡馆，购物中心和机场.
Hi! Guys i wanted to get an assistance on how i can create an application which can detect arp poisoning on the client machine, the purpose of the system is for the users who access to wi-fi networks for example in the cafe's, malls and airports.
<！-/*字体定义*/@ font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4; mso-font-charset:0; mso-generic-font-family:roman; mso-font-pitch:变量; mso-font-signature:-1610611985 1107304683 0 0 159 0;} @ font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4; mso-font-charset:0; mso-generic-font-family:swiss; mso-font-pitch:变量; mso-font-signature:-1610611985 1073750139 0 0 159 0;}/*样式定义*/p.MsoNormal，li.MsoNormal，div.MsoNormal {mso-style-unhide:no; mso-style-qformat:是; mso-style-parent:"； margin-top:0in; margin-right:0in;底边距:10.0pt; margin-left:0in;线高:115％; mso分页:寡妇孤儿；字体大小:11.0pt;字体家族:"Calibri"，"sans-serif"； mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:Calibri; mso-fareast-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:"Times New Roman"； mso-bidi-theme-font:minor-bidi;}.MsoChpDefault {mso-style-type:only-export; mso-default-props:是; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:Calibri; mso-fareast-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:时代" 新罗马书》； mso-bidi-theme-font:minor-bidi;}.MsoPapDefault {mso-style-type:仅导出；底边距:10.0pt; line-height:115％;} @page WordSection1 {size:8.5in 11.0in;边距:1.0英寸1.0英寸1.0英寸1.0英寸; mso-header-margin:.5in; mso-footer-margin:.5in; mso-paper-source:0;} div.WordSection1 {page:WordSection1;}->
<!-- /* Font Definitions */ @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4; mso-font-charset:0; mso-generic-font-family:roman; mso-font-pitch:variable; mso-font-signature:-1610611985 1107304683 0 0 159 0;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4; mso-font-charset:0; mso-generic-font-family:swiss; mso-font-pitch:variable; mso-font-signature:-1610611985 1073750139 0 0 159 0;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {mso-style-unhide:no; mso-style-qformat:yes; mso-style-parent:""; margin-top:0in; margin-right:0in; margin-bottom:10.0pt; margin-left:0in; line-height:115%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"Calibri","sans-serif"; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:Calibri; mso-fareast-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:"Times New Roman"; mso-bidi-theme-font:minor-bidi;} .MsoChpDefault {mso-style-type:export-only; mso-default-props:yes; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:Calibri; mso-fareast-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:"Times New Roman"; mso-bidi-theme-font:minor-bidi;} .MsoPapDefault {mso-style-type:export-only; margin-bottom:10.0pt; line-height:115%;} @page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in; mso-header-margin:.5in; mso-footer-margin:.5in; mso-paper-source:0;} div.WordSection1 {page:WordSection1;} -->
1. 系统应该能够检测到ARP表一旦发生更改，尤其是当默认网关MAC地址具有更改
2.系统应该能够在检测到ARP表后冻结ARP表.更改ARP表，并建议用户重新启动计算机以逐步摆脱攻击.
3. 该系统应能够恢复攻击前的ARP表.
请协助我建立这样的系统，我有足够的知识关于ARP协议及其功能方式以及攻击者如何不断发送回复和 能够欺骗arp表.
Kindly assist on what do i need to built such system, i have enough knowledge about ARP protocol and the way it functions and how the attacker send a constant replies and be able to spoof the arp table.
唯一让我陷入困境的是如何创建这样的系统，如果可以使用C#创建它
The only thing that makes me stuck is how can i create such system and if its possible to create it using C#
推荐答案
ARP中毒是对网络的攻击，而不是对客户端计算机的攻击.您将必须积极监视网关/路由器/等.以防止遭受此类攻击，而不仅仅是成为网络上的随机用户.
ARP poisoning is an attack on a network, not a client machine. You would have to be actively monitoring the gateways/routers/etc. to protect against such an attack, not just being a random user on the network.
这篇关于无线网络的ARP中毒检测系统的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
