Traceable Network Technology: Studies on Countermeasures for Thwarting Spoofing Attacks: Cases of IP Address Spoofing and Web Spoofing

Abstract

This article intends to give case studies for of thwarting spoofing attack. Spoofing is widely used when attackers attempt to increase the success rate of their cybercrimes. In the context of Denial of Service (DoS) attacks, IP address spoofing is employed to camouflage the attacker's location. In the context of social engineering, Web spoofing is used to persuade victims into giving away personal information. A Web spoofing attacker creates a convincing but false copy of the legitimate enterprises' web sites. The forged websites are also known as phishing sites. Our research group developed the algorithms, systems and practices, all of which analyze cybercrimes that employ spoofing techniques. In order to thwart Dos attacks, we show the deployment scenario for IP traceback systems. IP traceback aims to locate attack source, regardless of the spoofed source IP addresses. Unfortunately, IP traceback requires that its systems are widely deployed across the internet. We argue the practical deployment scenario within internets of China, Japan, and South Korea. We also develop a detection method for phishing sites. Currently, one of the most important research agenda to counter phishing is improving the accuracy for detecting phishing sites. Our approach, named HumanBoost, aims at improving the detection accuracy by utilizing Web user's past trust decisions. Based on our subject experiments, we analyze the average detection accuracy of both HumanBoost and CANTINA.