Towards IP geolocation with intermediate routers based on topology discovery

IP geolocation determines geographical location by the IP address of Internet hosts. IP geolocation is widely used by target advertising, online fraud detection, cyber-attacks attribution and so on. It has gained much more attentions in these years since more and more physical devices are connected to cyberspace. Most geolocation methods cannot resolve the geolocation accuracy for those devices with few landmarks around. In this paper, we propose a novel geolocation approach that is based on common routers as secondary landmarks (Common Routers-based Geolocation, CRG). We search plenty of common routers by topology discovery among web server landmarks. We use statistical learning to study localized (delay, hop)-distance correlation and locate these common routers. We locate the accurate positions of common routers and convert them as secondary landmarks to help improve the feasibility of our geolocation system in areas that landmarks are sparsely distributed. We manage to improve the geolocation accuracy and decrease the maximum geolocation error compared to one of the state-of-the-art geolocation methods. At the end of this paper, we discuss the reason of the efficiency of our method and our future research.

[1]  Ning Kong,et al.  HTTP Usage in the Registration Data Access Protocol (RDAP) , 2015, RFC.

[2]  Sándor Laki,et al.  Spotter: A model based active geolocation service , 2011, 2011 Proceedings IEEE INFOCOM.

[3]  John S. Heidemann,et al.  Towards geolocation of millions of IP addresses , 2012, IMC '12.

[4]  Dan Li,et al.  IP-Geolocation Mapping for Moderately Connected Internet Regions , 2013, IEEE Transactions on Parallel and Distributed Systems.

[5]  Emin Gün Sirer,et al.  Octant: A Comprehensive Framework for the Geolocalization of Internet Hosts , 2007, NSDI.

[6]  Han Zhang,et al.  A look at router geolocation in public and commercial databases , 2017, Internet Measurement Conference.

[7]  David Lie,et al.  Dude, Where's That Ip? Circumventing Measurement-based Ip Geolocation , 2022 .

[8]  Dana S. Richards,et al.  Statistical Geolocation of Internet Hosts , 2009, 2009 Proceedings of 18th International Conference on Computer Communications and Networks.

[9]  Kimberly C. Claffy,et al.  DRoP: DNS-based router positioning , 2014, CCRV.

[10]  K. K. Ramakrishnan,et al.  Mining checkins from location-sharing services for client-independent IP geolocation , 2014, IEEE INFOCOM 2014 - IEEE Conference on Computer Communications.

[11]  Ramesh Govindan,et al.  Census and survey of the visible internet , 2008, IMC '08.

[12]  D. Martin Swany,et al.  PerfSONAR: A Service Oriented Architecture for Multi-domain Network Monitoring , 2005, ICSOC.

[13]  Paul C. van Oorschot,et al.  Internet geolocation: Evasion and counterevasion , 2009, CSUR.

[14]  Aleksandar Kuzmanovic,et al.  Towards Street-Level Client-Independent IP Geolocation , 2011, NSDI.

[15]  Les Cottrell,et al.  The PingER project: active Internet performance monitoring for the HENP community , 2000, IEEE Commun. Mag..

[16]  Lakshminarayanan Subramanian,et al.  An investigation of geographic mapping techniques for internet hosts , 2001, SIGCOMM 2001.

[17]  Helen J. Wang,et al.  Mining the Web and the Internet for Accurate IP Address Geolocations , 2009, IEEE INFOCOM 2009.

[18]  David Wetherall,et al.  Towards IP geolocation using delay and topology measurements , 2006, IMC '06.

[19]  Serge Fdida,et al.  Constraint-Based Geolocation of Internet Hosts , 2004, IEEE/ACM Transactions on Networking.

[20]  Paul Barford,et al.  A Learning-Based Approach for IP Geolocation , 2010, PAM.

[21]  Vyas Sekar,et al.  How to Catch when Proxies Lie: Verifying the Physical Locations of Network Proxies with Active Geolocation , 2018, Internet Measurement Conference.