Editing Spoofing attack (section)

=== Spoofing and TCP/IP ===
{{Main|IP address spoofing|ARP spoofing}}
Many of the protocols in the [[TCP/IP]] suite do not provide mechanisms for [[Authentication|authenticating]] the source or destination of a message,<ref>{{Cite journal |last1=Veeraraghavan |first1=Prakash |last2=Hanna |first2=Dalal |last3=Pardede |first3=Eric |date=2020-09-14 |title=NAT++: An Efficient Micro-NAT Architecture for Solving IP-Spoofing Attacks in a Corporate Network |journal=Electronics |language=en |volume=9 |issue=9 |pages=1510 |doi=10.3390/electronics9091510 |issn=2079-9292|doi-access=free }}</ref> leaving them vulnerable to spoofing attacks when extra precautions are not taken by applications to verify the identity of the sending or receiving host. IP spoofing and [[ARP spoofing]] in particular may be used to leverage [[man-in-the-middle attack]]s against hosts on a [[computer network]]. Spoofing attacks which take advantage of TCP/IP suite protocols may be mitigated with the use of [[firewall (computing)|firewalls]] capable of [[deep packet inspection]] or by taking measures to verify the identity of the sender or recipient of a message.