ARP (Address Resolution Protocol) is one of the commonly used network protocol in TCP/IP network. Its function is to obtain the physical address based on the host IP address. However, ARP attack is also a common mean of local area network attack for the protocol characteristics, bringing serious security hidden danger to the network. According to the characteristics of ARP protocol, the ARP attack means are analyzed, and different solution strategies are given according to different kinds of attack.