Based on an introduction to the functions and working theory of the ARP (Address Resolution Protocol), this paper analyses the security holes in ARP. The security vulnerability of ARP, the attacking forms and potential damages are extensively discussed. Several protection solutions for daily managements and detection are given, advantages and disadvantage of these measures are detailed.