AN OVERVIEW OF NETWORK ADDRESS AND PROTOCOL MESSAGE SPOOFING ATTACKS

AN OVERVIEW OF NETWORK ADDRESS AND PROTOCOL MESSAGE SPOOFING ATTACKS

Authors

  • Dimitar Iliev Department of Communication and Computer Engineering and Security Technologies, Faculty of Technical Sciences, Konstantin Preslavsky University of Shumen, Shumen 9712, 115 Universitetska St., e-mail: dimitar25_8000@abv.bg

DOI:

https://doi.org/10.46687/jsar.v31i1.503

Keywords:

Network security, IP spoofing, MAC spoofing, NDP spoofing, DNS spoofing, Man-in-the-middle

Abstract

Network protocols use addresses and control messages to exchange data and establish communication between devices. When this information is not properly verified, attackers can replace it with false information. This paper presents an overview of IP spoofing, MAC spoofing, NDP spoofing, and DNS spoofing. It explains how these attacks work, what conditions they require, and how they can affect network security. Their connection with man-in-the-middle attacks is also discussed. The paper compares basic protective measures, including source address filtering, port security, protection of IPv6 discovery messages, DNSSEC, and encrypted communication with proper authentication. The review shows why different spoofing attacks require different protection measures and why network addresses alone should not be treated as proof of identity.

Author Biography

Dimitar Iliev, Department of Communication and Computer Engineering and Security Technologies, Faculty of Technical Sciences, Konstantin Preslavsky University of Shumen, Shumen 9712, 115 Universitetska St., e-mail: dimitar25_8000@abv.bg

Department of Communication and Computer Engineering and Security Technologies, Faculty of Technical Sciences, Konstantin Preslavsky University of Shumen, Shumen 9712, 115 Universitetska St., e-mail: dimitar25_8000@abv.bg

References

Ferguson, P., Senie, D., Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing. RFC 2827, BCP 38, May 2000.

Cisco Systems, Port Security. Security Configuration Guide, Cisco IOS XE Dublin 17.12.x, Catalyst 9500 Switches.

Nikander, P., Kempf, J., Nordmark, E., IPv6 Neighbor Discovery (ND) Trust Models and Threats. RFC 3756, May 2004.

Levy-Abegnoli, E., Van de Velde, G., Popoviciu, C., Mohacsi, J., IPv6 Router Advertisement Guard. RFC 6105, February 2011.

Gont, F., Implementation Advice for IPv6 Router Advertisement Guard (RA-Guard). RFC 7113, February 2014.

Hubert, van Mook, R., Measures for Making DNS More Resilient against Forged Answers. RFC 5452, January 2009.

Arends, R., Austein, R., Larson, M., Massey, D., Rose, S., DNS Security Introduction and Requirements. RFC 4033, March 2005.

Rescorla, E., The Transport Layer Security (TLS) Protocol Version 1.3. RFC 8446, August 2018.

Downloads

Published

06.11.2026

How to Cite

Iliev, D. (2026). AN OVERVIEW OF NETWORK ADDRESS AND PROTOCOL MESSAGE SPOOFING ATTACKS: AN OVERVIEW OF NETWORK ADDRESS AND PROTOCOL MESSAGE SPOOFING ATTACKS. JOURNAL SCIENTIFIC AND APPLIED RESEARCH, 31(1), 73–78. https://doi.org/10.46687/jsar.v31i1.503

Issue

Section

Communication and computer technologies

Categories