SYSTEM AND METHOD FOR MONITORING AND BLOCKING OF SPOOFING ATTACK

摘要

PURPOSE: A spoofing attack detection and blockage system and method are provided to effectively prevent an ARP weak point attack in the network environment of enterprise. CONSTITUTION: User computers(5,7,8) store an IP(Internet Protocol) and a MAC(Medium Access Control) address, and an ARP_C table including the IP and MAC address of a gateway(1). A client monitors the changed item on the ARP_C table. If there is a change on the ARP_C table, the client transmits the changed item to a server(3). The server decides whether the changed item was changed by a spoofing attacker.