Visible to the public IP Spoofing Detection Using Modified Hop Count

TitleIP Spoofing Detection Using Modified Hop Count
Publication TypeConference Paper
Year of Publication2014
AuthorsMukaddam, A., Elhajj, I., Kayssi, A., Chehab, A.
Conference NameAdvanced Information Networking and Applications (AINA), 2014 IEEE 28th International Conference on
Date PublishedMay
KeywordsComputer crime, computer network security, Filtering, HCF learning phase, Hop Count, hop count filtering, hop count filtering technique, Internet, IP address spoofing utilization, IP networks, IP spoofing, IP spoofing attacks, IP spoofing detection, modified hop count parameter, Routing protocols, statistical analysis, Testing

With the global widespread usage of the Internet, more and more cyber-attacks are being performed. Many of these attacks utilize IP address spoofing. This paper describes IP spoofing attacks and the proposed methods currently available to detect or prevent them. In addition, it presents a statistical analysis of the Hop Count parameter used in our proposed IP spoofing detection algorithm. We propose an algorithm, inspired by the Hop Count Filtering (HCF) technique, that changes the learning phase of HCF to include all the possible available Hop Count values. Compared to the original HCF method and its variants, our proposed method increases the true positive rate by at least 9% and consequently increases the overall accuracy of an intrusion detection system by at least 9%. Our proposed method performs in general better than HCF method and its variants.

Citation Key6838707