A New Method to Detect Abnormal IP Address on DHCP

Free registration required

Executive Summary

Dynamic Host Configuration Protocol (DHCP) provides a means of allocating and managing IP addresses dynamically over a network. An important characteristic of the DHCP server is that different hosts or network cards are not allowed to simultaneously use the same IP address in the DHCP mechanism. However, anyone can guest corresponding parameters such as IP address, subnet mask, and default gateway from the DHCP mode, and then reconfigure a static IP to access the network from DHCP mode. According to the DHCP mechanism, this paper traces abnormalities of the client IP or MAC address by comparing the ARP table and DHCP binding table in this paper. This paper performs the proposed method to detect abnormal hosts on both DHCPv4 and DHCPv6.

  • Format: PDF
  • Size: 594.4 KB