IP spoofing refers to an attacker attempting to masquerade as a legitimate and authenticated user by spoofing the victim's IP address. The concept of spoofing can apply to a variety of attacks in which an attacker spoofs a user's electronic identifying information. Even though this is not session hijacking this attack attempts to accomplish the same thing; take over an authenticated session from the legitimate user.