Study on Classification and Characteristics of Source Address Spoofing Attacks in the Internet

Source address spoofing is one of the most dangerous means of attacks in today's Internet. In this paper, we study and classification and characteristics of the source address spoofing. Source address spoofing can be classified in six categories. The characteristics of first category of source address spoofing are analyzed by the statistical analysis of packets collected by the CAIDA network telescope, because we found that partial information of the original source address spoofing attack packets could be found in the ICMP error packets returned to the network telescope.