Spoofing Attack

ARP Spoofing Attack Analysis and Defense Measure

ARP欺骗攻击原理分析与防范措施

We present countermeasures, including revoking the relation of trust, sniffer software to supervisor, TCP sequence number encryption. The improvement on packet filter to protect against IP Spoofing attack is also proposed.

提出了攻击的防范措施，其中包括撤消信任关系，监听软件进行监测，TCP序列号加密以及改进后的包过滤防火墙防护等方法。

Three methods are presented to detect DNS spoofing attack, and then another three techniques are proposed to identify the bogus packets and the right ones to ensure DNS service even attacked.

在分析DNS欺骗原理的基础上提出了3种攻击检测手段和3种识别攻击包的方法，对于提高DNS的安全性和抗攻击性具有积极的作用。

Applications of our system are manifold: prevention of source address spoofing, DDoS attack mitigation, distributed firewall-like filtering, collecting traffic statistics, traceback, distributed network debugging, support for forensic analyses and many more.

此系统的应用是多种多样的：防止源地址哄骗，ddos攻击的减轻，分布式类防火墙过滤，收集网络状态，回溯，分布式网络调试，支持辨证分析等等。

Approach to countermeasures of IP spoofing attack based on UNIX

基于UNIX的IP欺骗式攻击对策研究

This is a big threat to wireless network. In order to avoid and detect MAC address spoofing attack, bring forward a new detecting method for the spoofing attack by data packet sequence number.

为了有效地防止和检测MAC地址欺骗攻击，文中在分析无线局域网MAC地址欺骗攻击的基础上，提出一种利用数据包序列号检测MAC地址欺骗攻击的检测方法。

In this process, we found that there is a loophole in the Trusted Network Connection, which is platform spoofing attack. This attack will lead to the failure of the platform authentication and platform integrity check error.

在此过程中，我们发现可信网络连接中存在一个漏洞，即平台伪装攻击，这一攻击将导致平台身份认证的失败以及平台完整性校验错误，造成网络连接的安全目标不可达到。

Spoofing Attack in Route Optimization of Mobile IPv6

移动IPv6路由优化中的欺骗攻击

Then attack tree is adopted to define coordinated intrusion. Moreover, Z language, a formal language, is employed to depict the attack tree model. Last, a construction of IP Spoofing attack schemas exemplifies this method.

文章首先介绍协同入侵，然后引入攻击树来表示协同入侵，并用形式化语言Z语言描述攻击树模式，最后以IP欺骗攻击为例构造了一个IP Spoofing攻击模式。

IP Spoofing Attack: Principles, Methods, Tools and Countermeasures

IP欺骗攻击技术原理、方法、工具及对策

Cheating Detection and Defence of DNS Spoofing Attack

DNS欺骗攻击的检测和防范

LAN ARP Spoofing Attack Strategy Analysis and Safety Precautions

局域网中ARP欺骗攻击分析及安全防范策略

This article uses the method of adding user attributes in the integrity of the assessment process to solve the platform spoofing attack.

本文通过在完整性评估的过程中添加用户属性的方法解决了平台替换攻击。

This paper made a thorough analysis of the features of network interaction behaviors of normal users and attackers in the DDoS attack based on source IP address spoofing, and then proposes the IP Flow Interaction Behavior Feature ( IBF).

本文深入分析了伪造源IP地址的DDoS攻击中正常用户与攻击者的网络交互行为特征，提出了IP流交互行为特征（IP Flow Interaction Behavior Feature，IBF）的概念。

Research of ARP Spoofing Attack Protocol Based on Cache Overtime

基于缓存超时的ARP欺骗攻击协议的研究

At last, it describes the attack model in Z language, and builds an IP-Spoofing attack model based on IP-Spoofing.

最后，引入形式化语言Z语言来对攻击模式进行描述，并以IP-Spoofing为例构造了一个IP-Spoofing攻击模式。

Other detection methods are based on the statistics of IP addresses and the length of data packets, but their detection accuracy declines rapidly under the IP spoofing attack.

另一些方法基于IP地址和数据报长度的统计特征，但这些方法在IP地址欺骗攻击时检测率急剧下降。

This paper presents spoofing attack of IP address and its preventing method, and what serious problem it will result in, and also discuss some solution to the network.

给出IP地址的盗用和防范的基本手段及由此而导致的严重问题，并结合具体技术给出一般的解决方法。

ARP spoofing and ICMP redirection attack are used frequently, both of them can sniff the Ethernet or attack the target by means of denial of service.

同时指出，网络中实际存在目标主机对接收的ICMP重定向报文进行多种检查的情况，这使得ICMP重定向攻击难度加大，导致ICMP重定向攻击难以奏效。

This paper analyzes the abstraction of IP Spoofing attack.

分析了IP欺骗式攻击的攻击原理。