论文在对ARP协议简要介绍的基础上,主要分析了利用ARP协议漏洞进行网络攻击的原理和攻击的常见方式,讨论了防御ARP攻击的常见方法,并且针对ARP协议自身的特点,提出了一种利用“拒绝无请求型应答,采用ARP包认证”的规则防范ARP攻击的算法,适用于网络安全性要求较高的局域网。 Based on a brief introduction of ARP protocol, the dissertation analyzes the principle of ARP attacks and the common attack methods. The common methods of ARP attack defense are discussed. According to the characteristics of ARP protocol, The algorithm of preventing ARP attacks using the rule of “rejecting unsolicited response and adopting ARP packet authentication” is applicable to a local area network with high network security requirements.