IP spoofing

When IP spoofing is used to hijack a browser, a visitor who types in the URL (Uniform Resource Locator) of a legitimate site is taken to a fraudulent Web page created by the hijacker. For example, if the hijacker spoofed the Library of Congress Web site, then any Internet user who typed in the URL www.loc.gov would see spoofed content created by the hijacker.

If a user interacts with dynamic content on a spoofed page, the highjacker can gain access to sensitive information or computer or network resources. He could steal or alter sensitive data, such as a credit card number or password, or install malware . The hijacker would also be able to take control of a compromised computer to use it as part of a zombie army in order to send out spam.

Web site administrators can minimize the danger that their IP addresses will be spoofed by implementing hierarchical or one-time passwords and data encryption/decryption techniques. Users and administrators can protect themselves and their networks by installating and implementating firewalls that block outgoing packets with source addresses that differ from the IP address of the user's computer or internal network.

Read more about IP spoofing: - SecurityFocus.com provides more in-depth information.

Do you have something to add to this definition? Let us know. Send your comments to techterms@whatis.com

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Can DNS be used to support encryption? Expert Michael Cobb says it's more likely that encryption will be used to support DNS than the other way around. New attacks reveal fundamental problems with TCP Two security experts have found several basic problems with TCP, enabling them to execute DoS and other attacks against virtually any Internet-facing... Weaponizing Kaminsky's DNS discovery Even after the DNS flaw discovered by Dan Kaminsky, many organizations are still not patching their internal servers. John Strand explains why this is...

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary digest authentication  (SearchSecurity.com) Digest authentication is a method of authentication in which a request from a potential user is received by a network server and then sent to a domain... IGP  (SearchSecurity.com)