基于谱聚类的路由IP地理定位方法  

Spectral Clustering Based Router IP Geolocation

作　　者：陈嘉欣 许博 胡超 张国敏 王占丰 CHEN Jiaxin;XU Bo;HU Chao;ZHANG Guomin;WANG Zhanfeng(College of Command and Control Engineering,Army Engineering University,Nanjing 210007,China;Nanjing Lexbell Information Technology Co.,Ltd.,Nanjing 210007,China)

机构地区：[1]陆军工程大学指挥控制工程学院,江苏南京210007 [2]南京莱克贝尔信息技术有限公司,江苏南京210007

出　　处：《无线电工程》2023年第12期2895-2904,共10页Radio Engineering

基　　金：国家自然科学基金(面上项目)(62172432);江苏省重点研发计划项目(BE2022081)。

摘　　要：IP定位是通过网络设备的IP地址推断其所在真实地理位置的一项关键技术。现有的研究主要针对端IP的定位,关于路由IP地理定位研究较少,且这些方法选取的网络特征较为单一,加上过于依赖探测节点和地标节点的位置和数量,导致路由定位结果理想化,难以应用到实际工作中。基于这些现状,提出了一种基于谱聚类的路由IP地理定位(Spectral Clustering Based Router IP Geolocation,SCRG)方法。该方法对目标IP进行网络路径探测,获取较为完整的网络路由拓扑信息;采用谱聚类算法对路由IP进行聚类,并将路径上的时延信息纳入到算法中,作为IP节点之间的距离;利用测量得到的自治域系统(Autonomous System,AS)路径信息对聚类簇做进一步划分与合并,并加入簇内投票冲突解决机制,尽可能避免出现路由环路的情况,将投票所在城市作为簇内路由IP的定位结果。对中国广东省IP的探测实验表明,该方法能够有效提高路由IP地理定位的正确率,降低错误投票对定位结果带来的影响,实现快速高效的大规模路由IP城市级地理定位。IP geolocation is a key research technique that infers the true geographical location of network devices based on their IP addresses.Existing researches mainly focus on the geolocation of end IP,while there are few researches on router IP geolocation.Moreover,the network features selected by these methods are relatively simple,and they are too dependent on the location and number of detection nodes and landmark nodes,resulting in idealized router IP geolocation results,and thus making it difficult to apply in practical work.Based on the situation,a Spectral Clustering Based Router IP Geolocation(SCRG)method is proposed.Firstly,this method detects the network path of the target IP to obtain more complete network routing topology information.Spectral clustering algorithm is used to cluster router IP,and incorporates time delay information on the path into the algorithm as the distance between IP nodes.Secondly,the Autonomous System(AS)path information measured is used to further divide and merge the clusters,and the conflict resolution mechanism of voting within the cluster is introduced to avoid routing loops as much as possible.Finally,the voting city is used as the geolocation result for router IP within the cluster.The detection experiment of IP in Guangdong Province,China shows that this method can effectively improve the accuracy of router IP geolocation and reduce the impact of error voting on geolocation results,realizing rapid and efficient large-scale router IP city level geolocation.

关 键 词：IP定位 路由聚类 谱聚类 自治域系统路径 城市级定位 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]