地址转换协议(ARP)如果被恶意利用,会对局域网产生严重威胁。本文介绍了ARP在TCP/IP协议中的地位和作用,描述了它的工作原理,详细分析了它的几个主要特点,然后通过一个生动的实例介绍了黑客如何利用ARP协议的特点来进行ARP重定向,劫持目标主机与其它主机的会话,通过伪造会话信息实现攻击目的。最后,提出了几种防御ARP欺骗的解决方案并分析了每种方案的利弊及应用场合。 Address Translation Protocol (ARP) if malicious use, will have a serious threat to the LAN. This article describes the status and role of ARP in the TCP / IP protocol, describes its working principle, analyzes its main features in detail, and then presents a vivid example of how hackers use the characteristics of ARP to carry out ARP Redirect, hijack the target host and other host’s session, through the fake session information to achieve the purpose of the attack. Finally, several solutions to defend ARP spoofing are proposed and the advantages and disadvantages of each scheme are analyzed.