Address resolution process’ main work is convert IP address to physical address, detecting whether happened address conflicts, performing address reachability testing, etc.Addressresolution protocols (ARP or NDP) are important basic agreements of internet. There have been security problems because the protocol assumes that all nodes arereliable, lead to security problems. This paper reviewed the latest research of address resolution, described the security problems faced by address resolution, made a comparison of existing research methods, analyzed and classification elaborated, proposed a new topic for further study.

摘 要：地址解析协议（address resolution protocol，ARP）的安全性问题来自于两方面：一方面是协议假定网络上的节点都是可靠的；另一方面是将要解析的地址在网络中广播，从而使欺骗节点可以利用这些漏洞发起攻击。文章针对这两个缺点，提出了一种加入盲确认机制的改进协议（ARP with blind acknowledgement，ARPBA），该协议针对ARP应答采用二次盲确认，在确认包隐藏了目标IP地址，使欺骗节点无法根据目标IP进行欺骗，可有效的过滤掉欺骗主机的应答。通过OPNET仿真实验表明，ARPBA有效降低了局域网丢包率和ARP缓存表污染率，具有更强的安全性。