摘要
网络嗅探技术是一把双刃剑,对于网络攻击者和网络防御者都有着重要的意义。信息安全管理人员可以在网络安全运维中通过网络嗅探随时掌握网络的实际情况;对攻击者来说,其良好的隐蔽性是一种有效收集信息的手段,并且可以辅助进行IP欺骗。网络嗅探对信息安全的威胁来自其被动性和非干扰性,给Internet安全带来了极大的隐患。阐述网络嗅探和共享式网络的定义,目的是进一步分析共享式网络下的嗅探工作机制,通过采用共享式网络下基于Unix系统的嗅探程序结构的分析方法,提出使用开发库LibPcap下的函数设计嗅探软件的编程流程的结论,进而得到嗅探软件设计分析的结果。
Network sniffer technology is a double-edged sword which is of great significance for both network attackers and defenders. Information security management personnel can keep track of actual network conditions by means of network sniffing during network security operation and maintenance. For attackers,its good concealment is an effective information collection means,and can help with IP spoofing. The threat of network sniffing to information security comes from its passivity and non-interference,which poses a great danger to Internet security. The definitions of network sniffing and shared network are elaborated in this paper for the purpose of further analyzing work mechanism of sniffing in shared network. By adopting the Unix system based analysis method of sniffer program structure in shared network,it concludes that functions in Lib Pcap development library can be used to design programming flow of sniffer software,so as to obtain the analysis result of sniffer software design.
出处
《现代电子技术》
北大核心
2018年第6期57-60,共4页
Modern Electronics Technique
基金
河南省高校骨干教师资助项目(2014SJGLX431)~~
