TCP/IP spoofing fundamentals

Hastings, Nelson E.; McLean, P.A.

doi:10.1109/pccc.1996.493637

Cited by 22 publications

(5 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In a Spoofing attack [52], A sends messages on behalf of another entity. To do so, she sets the IP address in her packets to the address of another device (real or fake).…”

Section: Spoofing Attacksmentioning

confidence: 99%

SoK: Network-Level Attacks on the Bitcoin P2P Network

Franzoni

Daza

2022

IEEE Access

View full text Add to dashboard Cite

Over the last decade, Bitcoin has revolutionized the global economic and technological landscape, inspiring a new generation of blockchain-based technologies. Its protocol is today among the most influential for cryptocurrencies and distributed networks. In particular, the P2P layer represents a reference point for all permissionless blockchains, which often implement its solutions in their network layer. Unfortunately, the Bitcoin network protocol lacks a strong security model, leaving it exposed to several threats. Attacks at this level can affect the reliability and trustworthiness of the consensus layer, mining the credibility of the whole system. It is therefore of utmost importance to properly understand and address the security of the Bitcoin P2P protocol. In this paper, we give a comprehensive and detailed overview of known network-level attacks in Bitcoin, as well as the countermeasures that have been implemented in the protocol. We propose a generic network adversary model, and propose an objectivebased taxonomy of the attacks. Finally, we identify the core weaknesses of the protocol and study the relationship between different types of attack. We believe our contribution can help both new and experienced researchers have a broader and deeper understanding of the Bitcoin P2P network and its threats, and allow for a better modeling of its security properties.INDEX TERMS blockchain, bitcoin P2P network, bitcoin security, survey

show abstract

“…In a Spoofing attack [52], A sends messages on behalf of another entity. To do so, she sets the IP address in her packets to the address of another device (real or fake).…”

Section: Spoofing Attacksmentioning

confidence: 99%

SoK: Network-Level Attacks on the Bitcoin P2P Network

Franzoni

Daza

2022

IEEE Access

View full text Add to dashboard Cite

show abstract

“…Protocols and Specifications Security Attacks Attacks Characteristics/Specifications Application HTTP, FTP, SMTP malware attack [6], FTP bounce [7] internal malicious software, user impersonation Transport TCP, UDP TCP/UDP flooding [8] overload of fake requests and data packets Network IP, ICMP IP spoofing [9] and hijacking [10] falsification and impersonation of IP addresses MAC CSMA, CDMA, OFDMA MAC spoofing [11], network injection [12] falsification of source ID, unauthorized transmissions PHY Transmission Medium, Modulation Eavesdropping [13], jamming [14] unauthorized access to data, transmission interruption cation in IEEE 802.11 networks [16], [17]. Experimental analyses with Wi-Fi signals have proved that a 99% accuracy can be achieved in a system with a few nodes and 85% in largescale applications [18].…”

Section: Osi Layermentioning

confidence: 99%

Antenna Additively Manufactured Engineered Fingerprinting for Physical-Layer Security Enhancement for Wireless Communications

Miguelez-Gomez

Rojas-Nastrucci

2022

IEEE Open J. Antennas Propag.

View full text Add to dashboard Cite

Physical layer security is increasingly being exploited as a technique to enhance the security of wireless communications. Wellknown hardware security techniques leverage unintended manufacturing process variations or fixed unique hardware structures in the semiconductors for identification of different copies of an RF system. The fundamentally different concept of engineering a unique fingerprint for each antenna produced, by leveraging additive manufacturing, is presented in this work. To the best of the author's knowledge, this is the first application of the concept of radio frequency (RF) fingerprint engineering using additively manufactured (AM) antennas for hardware-based security mechanisms. AM engineered fingerprints (AMEF) are based on intentional features added to antenna's geometries using 3D printing, enabling more accurate signal source identification and classification. Such unique features per unit produced would be prohibitively costly by using traditional photolithographic processes. The AMEF concept is validated using AM right hand circularly polarized (RHCP) truncated corner probe fed (TCPF) patch antennas and a testbed setup with software-defined radios and MATLAB implementations to create, transmit, receive, and prepare a convolutional neural network (CNN) to classify the transmitted raw I/Q data of Wi-Fi signals (IEEE 802.11). The AMEF technique greatly improves the physical layer security performance limitations in large-scale applications where the features of the devices can overlap, at a low-cost and low production time impact, and it allows the use of the antenna features for both individual and type classification and identification of RF sources.

show abstract

“…Cybercriminals misuse SMTP to lie recipients about their true identities by not only spoofing one or more headers in the envelope or header of the message that somehow reveals their identity but also put misleading information in these headers. A highly technical spammer or phisher may also evade packet filters and spoof the source IP address of their packets to indicate that the message is from a trusted domain (Hastings et al 1996).…”

Section: Need For E-mail Forensic Investigationmentioning

confidence: 99%

Technology Corner: Analysing E-Mail Headers for Forensic Investigation

Banday¹

2011

JDFSL

View full text Add to dashboard Cite

Electronic Mail (E-Mail), which is one of the most widely used applications of Internet, has become a global communication infrastructure service. However, security loopholes in it enable cybercriminals to misuse it by forging its headers or by sending it anonymously for illegitimate purposes, leading to e-mail forgeries. E-mail messages include transit handling envelope and trace information in the form of structured fields which are not stripped after messages are delivered, leaving a detailed record of e-mail transactions. A detailed header analysis can be used to map the networks traversed by messages, including information on the messaging software and patching policies of clients and gateways, etc. Cyber forensic e-mail analysis is employed to collect credible evidence to bring criminals to justice. This paper projects the need for e-mail forensic investigation and lists various methods and tools used for its realization. A detailed header analysis of a multiple tactic spoofed e-mail message is carried out in this paper. It also discusses various possibilities for detection of spoofed headers and identification of its originator. Further, difficulties that may be faced by investigators during forensic investigation of an e-mail message have been discussed along with their possible solutions.

show abstract

TCP/IP spoofing fundamentals

Cited by 22 publications

References 0 publications

SoK: Network-Level Attacks on the Bitcoin P2P Network

SoK: Network-Level Attacks on the Bitcoin P2P Network

Antenna Additively Manufactured Engineered Fingerprinting for Physical-Layer Security Enhancement for Wireless Communications

Technology Corner: Analysing E-Mail Headers for Forensic Investigation

Contact Info

Product

Resources

About