Spoofing attack
A spoofing attack is a deceptive attack in which an adversary impersonates a legitimate identity, device, sender, signal, service, or other trusted entity.
Acing the CCNA Exam: Volume 2 Advanced Networking and Security
A spoofing attack is an attack in which an attacker falsifies a device or sender identity, such as with a forged IP or MAC address.
- How it is used
- Frames spoofing as a technique used across denial-of-service, reflection, DHCP exhaustion, and interception attacks.
- How deep it goes
- Defines identity falsification and explains several attack mechanisms, but stops short of configuration, detection, or mitigation procedures.
- Examples
- Uses SYN floods, DHCP starvation, reflection/amplification, and ARP poisoning as concrete examples.
- What you can do after
- Evaluate how forged IP or MAC identities support resource exhaustion, response redirection, amplification, or communication interception.
Read how Acing the CCNA Exam: Volume 2 Advanced Networking and Security explains spoofing attack →
Software Security for Developers
Spoofing is an attack in which a malicious party presents an imitation of a legitimate identity or signal to deceive an authentication system.
- How it is used
- Frames spoofing as a practical authentication risk across websites, biometric sensors, phishing attempts, and passwordless login.
- How deep it goes
- Explains spoofing examples and defenses through certificate checks, biometric storage, antispoofing, and origin binding without developing protocol internals.
- Examples
- Uses fake bank sites, open Wi-Fi, fake fingerprints, 3D masks, photos, videos, and AI-generated biometric data.
- What you can do after
- Evaluate authentication designs by checking certificate validation, biometric protections, antispoofing measures, and domain-bound hardware-key responses.
Read how Software Security for Developers explains spoofing attack →
Related concepts
- STRIDEpart of · STRIDE is a threat-modeling methodology that classifies threats as spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege.
- TLSaddressed by · Transport Layer Security (TLS) is a cryptographic protocol that protects network communications through confidentiality, integrity, and authentication of communicating endpoints.
- IP spoofingincludes · IP spoofing is the forgery of a network packet’s source IP address to make traffic appear to originate from another device or address.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.