SOURCE ADDRESS SPOOFING PACKET DETECTING APPARATUS, SOURCE ADDRESS SPOOFING PACKET DETECTING METHOD, AND SOURCE ADDRESS SPOOFING PACKET DETECTING PROGRAM

摘要

A source address spoofing packet detecting apparatus for detecting packets in which source IP address spoofing has been made, comprising a packet control part for controlling packet input/output and obtaining the source IP address and TTL value of an input packet; a reference TTL value storing part for associating a reference TTL value indicative of a range of normal existent time with a source address and storing the reference TTL value and source address associated with each other; and an address spoofing determining part for comparing the TTL value of the input packet with the reference TTL value associated with the source IP address of the input packet and determining, based on the result of the comparison, whether any source IP address spoofing is present in the input packet.