Abstract: IP address spoofing is a serious threat to the legitimate use of the Internet. Many Preventive mechanisms are thwarted by the ability of attackers to forge or spoof the source addresses in IP packets. Attackers can evade detection and put a substantial burden on the destination network for policing attack packets. In this paper a study of methods for detection of IP address spoofing is undertaken. It compares various host based methods such as IPSec, the OS Fingerprinting, TCP probing, SYN Cookies and IP puzzles with router based methods such as ingress and egress filtering, Reverse Path Forwarding (RPF), Router based Filtering (RBF), Spoofing Prevention Method (SPM), Distributed Packet Filtering (DPF), Inter Domain Packet Filtering (IDPF), SAVE, BASE, Hop Count Filtering (HCF), Pi and StackPi on the bases of their performances and effectiveness.

Keywords: Reverse Path Forwarding (RPF); Router Based Filtering (RBF); Spoofing Prevention Method (SPM); Distributed Packet Filtering (DPF); Inter Domain Packet Filtering (IDPF); Path Identification; Stack Path Identification.