Skip to content
Research Article Open access CC BY 4.0

Mitigating Insider Threat’s IP Spoofing through Enhanced Dynamic Cluster Algorithm (EDPU Based HCF)

O. A. Akano, T. O. Olayinka, O. D. Adeniji, B.O. Ogunjinmi

Advances in Research · pp. 85–90 · Published 27 Mar 2024

10.9734/air/2024/v25i31052

Abstract

Insider Threat has always been a major problem to computer security due to unauthorized system misuse by users in an organization. Understanding the concept and the inherent adverse consequences of the insider threat can assist in postulating mitigating approaches and techniques to the menace. Insider intrusion, from researches, experiences and literature have proved to be more expensive and destructive more than external attacks due the comprehensive understanding of the internal operations of the organization by the perpetrator. Many researchers have explored into the unhealthy nature of insider activity with the aim of eliminating the threat, thereby identifying the various categories as theft of intellectual property, fraud, sabotage, espionage. This work tends to address the menace by studying models for detecting, reducing and eliminating the threat through IP Spoofing in order to propose a better model for the intrusion. Certain experimental research through analysis of network data measurement has shown that HCF (Hop Count Filtering) can discover and discard almost 90% of spoofed IP packets but an improvement on this experiment called DPU (Dynamic Path Update) Based Hop Count Filtering has proved to identify and discard more than 90%. This was carried out in Linux Kernel environment to substantiate the effectiveness of its measurements. However, enhancing enhancing the performance of the DPU-based HCF by reducing the packet size of packets at the point of entry in order to decrease the network traffic, and to permanently discard 100% spoofed packets is the research direction of this work

Insider threat IP spoofing DDOS TTL hop count

References (9)

  1. 1 Detecting Insider Threats Using RADISH: A System for Real-Time Anomaly Detection in Heterogeneous Data Streams [DOI]
  2. 2 USB-Watch: a Generalized Hardware-Assisted Insider Threat Detection Framework [DOI]
  3. 3 Development of DDoS Attack Detection Approach in Software Defined Network Using Support Vector Machine Classifier [DOI]
  4. 4 Detection of Masqueraders Based on Graph Partitioning of File System Access Events [DOI]
  5. 5 OS Independent and Hardware-Assisted Insider Threat Detection and Prevention Framework [DOI]
  6. 6 Survival analysis for insider threat [DOI]
  7. 7 Energy Efficient Hierarchical Cluster Head Election Using Exponential Decay Function Prediction [DOI]
  8. 8 Character Proximity For RFID Smart Certificate System: A Revolutionary Security Measure To Curb Forgery Menace.
  9. 9 Dynamic Flow Reduction Scheme Using Two Tags Multi protocol Label Switching (MPLS) in Software Define Network [DOI]

Cited by 4

Experimental Evaluation of a Secured Privacy Preservation Scheme using IP Traceback Logic in Wireless Sensor Networks

S. Agnes Shifani, M.I. Mary Metilda, G. Vinoth Rajkumar · 2024 5th International Conference on Smart Electronics and Communication (ICOSEC) · 2024

Showing 1 of 4 known citations — external sources report more than can currently be individually listed.

Related research

Article metrics

Real usage data collected on this platform.

64

Page views

0

PDF downloads

24

Outbound clicks

4

Citations

Views over time

Views by country

Approximate, from request IP at view time — not citizenship or institution. Countries with fewer than 5 views are grouped as "Other".

Traffic sources

Referring site, by host.

Views and downloads exclude known bots/crawlers. Citations combines this platform's own DOI-resolved index with each external source's own reported total — see Cited by above for individually listed citing works. Last refreshed 0 seconds ago.