Towards IP geolocation with intermediate routers based on topology discovery  

作　　者：Zhihao Wang Hong Li Qiang Li Wei Li Hongsong Zhu Limin Sun 

机构地区：[1]Institute of Information Engineering Chinese Academy of Sciences,Beijing,China [2]School of Cyber Security,University of Chinese Academy of Sciences,Beijing,China [3]School of Computer and Information Technology,Beijing Jiaotong University,Beijing,China [4]Department of Computer Science,Georgia State University,Atlanta,Georgia

出　　处：《Cybersecurity》2018年第1期500-513,共14页网络空间安全科学与技术（英文）

摘　　要：IP geolocation determines geographical location by the IP address of Internet hosts.IP geolocation is widely used by target advertising,online fraud detection,cyber-attacks attribution and so on.It has gained much more attentions in these years since more and more physical devices are connected to cyberspace.Most geolocation methods cannot resolve the geolocation accuracy for those devices with few landmarks around.In this paper,we propose a novel geolocation approach that is based on common routers as secondary landmarks(Common Routers-based Geolocation,CRG).We search plenty of common routers by topology discovery among web server landmarks.We use statistical learning to study localized(delay,hop)-distance correlation and locate these common routers.We locate the accurate positions of common routers and convert them as secondary landmarks to help improve the feasibility of our geolocation system in areas that landmarks are sparsely distributed.We manage to improve the geolocation accuracy and decrease the maximum geolocation error compared to one of the state-of-the-art geolocation methods.At the end of this paper,we discuss the reason of the efficiency of our method and our future research.

关 键 词：IP geolocation Network topology discovery Web landmarks Relative latency Statistical learning 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]