問81
頻出度★★★
不正アクセスを行う手段の一つであるIPスプーフィングの説明として, 適切なものはどれか。
平成27年度 秋期 ITパスポート試験 問81
テクノロジ系セキュリティ › 情報セキュリティ
This question's explanation and your answers so far.
解説
問 81
Incorrectア
Luring users to a fake site with email that impersonates a financial institution or well-known company in order to steal personal information describes phishing. It has nothing to do with forging an IP address and is not IP spoofing.
Incorrectイ
A secret communication route set up on an already-compromised server for re-entry describes a backdoor. It is a different concept from IP spoofing, which forges the source IP.
- ウ
正解 IP spoofing is an attack technique in which a packet’s source IP address is rewritten to a false value different from the real one and the packet is then sent, thereby impersonating another device. This lets an attacker slip past access controls that decide whether to allow communication based on the source address, or hide the true origin of the attack. Choice ウ, “sending packets with a forged source IP address”, matches this definition exactly, so it is correct. In English, spoofing means impersonation or falsification, and IP spoofing refers to the falsification of the IP address.
Incorrectエ
Collecting a user’s operations and personal information without the person noticing describes spyware. It is information-gathering malware, different from IP spoofing, which forges the source IP of packets.
ここがポイント
- IP spoofing = sending packets with a falsified source IP address in order to impersonate another device. It is abused to bypass access controls based on the source address or to hide the origin of an attack.
- Distinguish similar attack/threat terms: do not confuse it with phishing (stealing information by luring victims to a fake site), a backdoor (a hidden communication route for re-entry), or spyware (collecting information without the user’s awareness).
用語