A Solution for Detecting and Defending ARP Spoofing on Virtual Machines

NCU Institutional Repository > 資訊電機學院 > 資訊工程學系碩士在職專班 > 博碩士論文 > Item 987654321/83917

請使用永久網址來引用或連結此文件: http://ir.lib.ncu.edu.tw/handle/987654321/83917

題名:	A Solution for Detecting and Defending ARP Spoofing on Virtual Machines
作者:	曾宇澤;Tseng, Yu-Tse
貢獻者:	資訊工程學系在職專班
關鍵詞:	虛擬機器;位址解析協定;位址解析協定欺騙;KVM;VM;ARP Spoofing;QEMU;libvirt;ARP
日期:	2020-06-12
上傳時間:	2020-09-02 17:41:49 (UTC+8)
出版者:	國立中央大學
摘要:	為了更有效利用中央處理器的效能，虛擬化也越來越被廣泛使用且非常容易建構，一台實體主機上同時執行多個虛擬作業體統是常見的情況，多台虛擬主機組成的虛擬網路，資料連接層的攻擊也跟著出現在這些虛擬網路上，例如網路位址解析欺騙、媒體存取控制位址替換攻擊等。由於虛擬主機有可預先包裝的特性，有很多已經包裝好特定服務的虛擬主機，方便使用者透過網路下載直接佈屬，如包裝 Apache 伺服器的虛擬主機，使用者下載佈屬後就立即使用，因為使用者無法掌握這些虛擬主機實際包裝的服務，使得虛擬主機不能被性任，我們想在Linux KVM 開源虛擬機器平台上實做，驗證一套不需複雜設定的資料連接層防護偵測系統是否可行，並以網路位址解析欺騙的偵測防護作為首要實做項目。;In order to make more effective use of CPU performance, virtualization has also become more and more widely used and very easy to build, it is a common situation to perform multiple virtual machines simultaneously on a physical host, virtual network composed of multiple virtual machines comes also, Layer 2 attacks also appeared on these virtual networks, for example ARP spoofing, MAC spoofing attacks. Because the virtual machine has packing features, lot of packed virtual machines can be downloaded at INTERNET, user can directly provision those packed virtual machines to physical host, we can′t ensued these is no any malicious software packed in the virtual machine, therefore the virtual machine download from INTERNET is un-trustable, above reasons made us want to implement a system in Linux KVM, verify the feasibility of a Layer 2 protection detection system that does not require complex settings, and take the detection and protection of ARP spoofing as the first practical item.
顯示於類別:	[資訊工程學系碩士在職專班 ] 博碩士論文

文件中的檔案:

檔案	描述	大小	格式	瀏覽次數
index.html		0Kb	HTML	213	檢視/開啟

在NCUIR中所有的資料項目都受到原著作權保護.

社群 sharing

資料載入中.....