A NOVEL SCHEME FOR DETECTING AND PREVENTING SPOOFED IP ACCESS ON NETWORK USING IP2HP FILTER

Denial of Service (DoS) attacks presents a serious problem for internet communications. It simply floods the link of the victim server with a large amount of packets leading to a high rate of packet drops for legitimate users. In general, DoS attacks are not exposed but the threat is common. The problem is aggravated when the attackers spoof their IP addresses. Defense against IP spoofing is a dominant and many approaches that could diminished the spoofing problem. Since the destination based forwarding paradigm of the Internet Protocol, IP address spoofing is both simple and very effective in evading both prevention and detection. The straightforward method of installing simple filters without proper validation at border routers is rendered inefficient by IP spoofing. The attacker can choose randomly an IP address as the source for different packets and thus make the detection method infeasible. Therefore, detecting and preventing packets with spoofed source address has been actively pursued in the research community. Many existing solutions to this problem are IP trace back, packet marking, authentication methods etc. Among these, this paper proposes a solution based on request verification cum filtering technique near the victim server. An experimental result shows that the proposed method eliminates most of the spoofed packets with moderate memory and time consumption.