Street-Level IP Geolocation Algorithm Based on Landmarks Clustering  

作　　者：Fan Zhang Fenlin Liu Rui Xu Xiangyang Luo Shichang Ding Hechan Tian 

机构地区：[1]PLA Strategic Support Force Information Engineering University,Zhengzhou,450001,China [2]State Key Laboratory of Mathematical Engineering and Advanced Computing,Zhengzhou,450001,China [3]Cyberspace Security Key Laboratory of Sichuan Province,Chengdu,610000,China [4]China Electronic Technology Cyber Security Co.,Ltd.,Chengdu,610000,China [5]University of Goettingen,Goettingen,37075,Germany

出　　处：《Computers, Materials & Continua》2021年第3期3345-3361,共17页计算机、材料和连续体（英文）

基　　金：the National Key R&D Program of China 2016YFB0801303(F.L.received the grant,the sponsors’website is https://service.most.gov.cn/);by the National Key R&D Program of China 2016QY01W0105(X.L.received the grant,the sponsors’website is https://service.most.gov.cn/);by the National Natural Science Foundation of China U1636219(X.L.received the grant,the sponsors’website is http://www.nsfc.gov.cn/);by the National Natural Science Foundation of China 61602508(J.L.received the grant,the sponsors’website is http://www.nsfc.gov.cn/);by the National Natural Science Foundation of China 61772549(F.L.received the grant,the sponsors’website is http://www.nsfc.gov.cn/);by the National Natural Science Foundation of China U1736214(F.L.received the grant,the sponsors’website is http://www.nsfc.gov.cn/);by the National Natural Science Foundation of China U1804263(X.L.received the grant,the sponsors’website is http://www.nsfc.gov.cn/);by the Science and Technology Innovation Talent Project of Henan Province 184200510018(X.L.received the grant,the sponsors’website is http://www.hnkjt.gov.cn/).

摘　　要：Existing IP geolocation algorithms based on delay similarity often rely on the principle that geographically adjacent IPs have similar delays.However,this principle is often invalid in real Internet environment,which leads to unreliable geolocation results.To improve the accuracy and reliability of locating IP in real Internet,a street-level IP geolocation algorithm based on landmarks clustering is proposed.Firstly,we use the probes to measure the known landmarks to obtain their delay vectors,and cluster landmarks using them.Secondly,the landmarks are clustered again by their latitude and longitude,and the intersection of these two clustering results is taken to form training sets.Thirdly,we train multiple neural networks to get the mapping relationship between delay and location in each training set.Finally,we determine one of the neural networks for the target by the delay similarity and relative hop counts,and then geolocate the target by this network.As it brings together the delay and geographical coordinates clustering,the proposed algorithm largely improves the inconsistency between them and enhances the mapping relationship between them.We evaluate the algorithm by a series of experiments in Hong Kong,Shanghai,Zhengzhou and New York.The experimental results show that the proposed algorithm achieves street-level IP geolocation,and comparing with existing typical streetlevel geolocation algorithms,the proposed algorithm improves the geolocation reliability significantly.

关 键 词：IP geolocation neural network landmarks clustering delay similarity relative hop 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]