A Novel Method Defense against IP Spoofing Using Packet Filtering and Marking

With wide spread use of internet in various fields, networks are being exposed to many security vulnerabilities such as distributed denial of service (DDoS) attack, worm/virus, and so on. The prevention failure of network security leads to either revealing of sensitive information or interruption of network services, thereby results in the enormous economic loss. The distributed DoS attack will occurs at Network level by obtaining IP addresses. This kind of vulnerability is called as IP Spoofing. Intrusion Detection System (IDS) has been used to secure these environments for sharing their data over network and host based IDS approaches. This paper focus on the defense against IP spoofing attacks using Packet filtering methods and Packet Marking techniques. This scheme is defense against DDoS attacks and IP Spoofing attacks.