thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Intermediate

IP Spoofing

Forging the source IP address of packets to hide the sender's identity or impersonate another system.

Definition

Spoofing enables reflection and amplification DDoS attacks and can bypass IP-based trust. Because replies go to the spoofed address, it is mainly useful for one-way attacks with UDP or blind TCP attacks. Ingress and egress filtering per BCP 38 and unicast reverse path forwarding mitigate it.

Example

Sending UDP packets that claim to come from the victim's IP to an NTP server.

Exam tip

BCP 38 / uRPF filtering is the standard answer for preventing spoofed packets.

Related terms