Adaptive IP geolocation framework for target network scenarios

Shuodi ZU; Shichang DING; Fuxiang YUAN; Xiangyang LUO

doi:10.11959/j.issn.2096-109x.2023084

您当前的位置：

首页 >

文章列表页 >

Adaptive IP geolocation framework for target network scenarios

Papers | 更新时间：2024-06-03

- Adaptive IP geolocation framework for target network scenarios
- Chinese Journal of Network and Information Security Vol. 9, Issue 6, Pages: 71-85(2023)
- 作者机构：
  
  1. 网络空间态势感知河南省重点实验室，河南郑州 450001
  2. 信息工程大学，河南郑州 450001
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2023084
  CLC： TP393
- Online First：2023-12，
  
  Published：25 December 2023
- 稿件说明：
移动端阅览
Shuodi ZU, Shichang DING, Fuxiang YUAN, et al. Adaptive IP geolocation framework for target network scenarios[J]. Chinese Journal of Network and Information Security, 2023, 9(6): 71-85.
DOI：

Shuodi ZU, Shichang DING, Fuxiang YUAN, et al. Adaptive IP geolocation framework for target network scenarios[J]. Chinese Journal of Network and Information Security, 2023, 9(6): 71-85. DOI： 10.11959/j.issn.2096-109x.2023084.

摘要

通过 IP 来定位目标位置是基于位置的服务的重要基础。当前研究者面向不同的网络场景，提出了不同实现原理的IP定位方法。但在不同的网络场景中，各类IP定位方法难以维持理想的定位效果。介绍了基于网络测量的 IP 定位的 3 种典型实现原理，分析了各类方法在不同网络场景下的优缺点，并提出了一种目标网络场景自适应的 IP 定位框架。该定位框架将目标在地标库中进行位置对比，初步判定目标的城市级位置并分布式部署探测源；随后获取目标所在城市的时延、拓扑、同子网地标等属性，并判定其所处网络场景；根据目标网络场景，选择合适类型的定位算法对目标 IP 进行定位，输出位置估计结果。通过在我国11个城市进行模拟定位实验，得到了在不同数量和分布的地标数据支撑下各类IP定位方法的多层次表现，结果显示所提框架的城市级定位成功率可达96.16%，街道级定位中值误差可达4.13 km，同时所提框架在不同的同子网地标数量和目标可达性条件下均能保持稳定的定位效果。实验结果验证了所提框架的有效性，并为IP定位研究提供新的思路。

Abstract

The target location can be determined through IP geolocation

serving as a vital foundation for location-based services.Researchers have proposed various IP geolocation algorithms with different implementation principles to cater to different network scenarios.However

maintaining an ideal geolocation effect proves challenging for these algorithms in diverse network scenarios.Three typical implementation principles for IP geolocation based on network measurement were introduced.The advantages and disadvantages of these methods in various network scenarios were analyzed

and an adaptive IP geolocation framework specifically tailored to target network scenarios was proposed.The geolocation framework was functioned as follows: initially

a preliminary city-level location estimation was obtained by comparing the target’s location with the landmark database.Then

detection sources were deployed in a distributed manner

and information such as delay

topology and same subnet landmarks for the target city was gathered to determine the network scenario.Finally

an appropriate geolocation method was employed to accurately estimate the target’s location according to the identified network scenario.Through simulation geolocation experiments in 11 cities of China

the multi-level performance of various IP geolocation methods supported by landmark data of different quantities and distributions was evaluated.The results indicate that the proposed framework achieves a city-level geolocation success rate of 96.16% and a median error of 4.13 km for street-level geolocation.Moreover

the framework demonstrates stable geolocation performance across different conditions

including varying same subnet landmark numbers and target accessibility.These experimental findings validate the effectiveness of the proposed framework and offer novel insights for IP geolocation research.

关键词

Keywords

references

NIU B , LI Q , ZHU X , et al . Enhancing privacy through caching in location-based services [C ] // 2015 IEEE Conference on Computer Communications (INFOCOM) . 2015 : 1017 - 1025 .

ZHENG X , CAI Z , LI J , et al . Location-privacy-aware review publication mechanism for local business service systems [C ] // 2017 IEEE Conference on Computer Communications (INFOCOM) . 2017 : 1 - 9 .

赵帆 , 罗向阳 , 刘粉林 . 网络空间测绘技术研究 [J ] . 网络与信息安全学报 , 2016 , 2 ( 9 ): 1 - 11 .

ZHAO F , LUO X Y , LIU F L . Research on cyberspace surveying and mapping technology [J ] . Chinese Journal of Network and Information Security , 2016 , 2 ( 9 ): 1 - 11 .

BURCH H , CHESWICK B . Mapping the internet [J ] . Computer , 1999 , 32 ( 4 ): 97 - 98 .

CHEN J , LIU F , ZHAO F , et al . A SC-vivaldi network coordinate system based method for IP geolocation [J ] . Journal of Internet Technology , 2016 , 17 ( 1 ): 119 - 127 .

郭莉 , 曹亚男 , 苏马婧 , 等 . 网络空间资源测绘:概念与技术 [J ] . 信息安全学报 , 2018 , 3 ( 4 ): 1 - 14 .

GUO L , CAO Y N , SU M J , et al . Cyberspace resources surveying and mapping:the concepts and technologies [J ] . Journal of Cyber Security , 2018 , 3 ( 4 ): 1 - 14 .

LIU C , LUO X , YUAN F , et al . RNBG:a ranking nodes based IP geolocation method [C ] // 2020 IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS) . 2020 : 80 - 84 .

ZHANG F , LIU F , XU R , et al . Street-level IP geolocation algorithm based on landmarks clustering [J ] . Computers Materials ＆Continua , 2021 , 66 ( 3 ): 3345 - 3361 .

DING S , LUO X , WANG J , et al . GNN-Geo:a graph neural network-based fine-grained IP geolocation framework [C ] // IEEE Transactions on Network Science and Engineering , 2023 : 1 - 18 .

方滨兴 . 从层次角度看网络空间安全技术的覆盖领域 [J ] . 网络与信息安全学报 , 2015 , 1 ( 1 ): 2 - 7 .

FANG B X . A hierarchy model on the research fields of cyberspace security technology [J ] . Chinese Journal of Network and Information Security , 2015 , 1 ( 1 ): 2 - 7 .

ZU S , LUO X , ZHANG F . IP-geolocater:a more reliable IP geolocation algorithm based on router error training [J ] . Frontiers of Computer Science , 2022 , 16 ( 1 ): 1 - 11 .

ZHAO F , LUO X , GAN Y , et al . IP geolocation based on identification routers and local delay distribution similarity [J ] . Concurrency and Computation:Practice and Experience , 2019 , 31 ( 22 ): 4722 .

WANG Y , BURGENER D , FLORES M , et al . Towards street-level client-independent IP geolocation [C ] // Proceedings of the 8th USENIX Conference on Networked Systems Design and Implementation . 2011 : 365 - 379 .

ZHAO F , XU R , LI R , et al . Street-level geolocation based on router multilevel partitioning [J ] . IEEE Access , 2019 , 7 : 59237 - 59248 .

ZU S , LUO X , DU S , et al . A delay deviation tolerance IP geolocation method with error estimation [J ] . Scientific Reports , 2022 , 12 ( 1 ): 1 - 15 .

MUKNE N , PAFFENROTH R . Probabilistic inference of Internet node geolocation with anomaly detection [C ] // 2017 IEEE International Symposium on Technologies for Homeland Security (HST) . 2017 : 1 - 6 .

WANG T , XU K , SONG J , et al . An optimization method for the geolocation databases of Internet hosts based on machine learning [J ] . Mathematical Problems in Engineering , 2015 , 2015 : 1 - 17 .

LI H , ZHANG P , WANG Z , et al . Changing IP geolocation from arbitrary database query towards multi-databases fusion [C ] // 2017 IEEE Symposium on Computers and Communications(ISCC) . 2017 : 1150 - 1157 .

POESE I , UHLIG S , KAAFAR M A , et al . IP geolocation databases:Unreliable [J ] . ACM SIGCOMM Computer Communication Review , 2011 , 41 ( 2 ): 53 - 56 .

SHAVITT Y , ZILBERMAN N . A geolocation databases study [J ] . IEEE Journal on Selected Areas in Communications , 2011 , 29 ( 10 ): 2044 - 2056 .

ZHAO F , SONG Y , LIU F , et al . City-level geolocation based on routing feature [C ] // 2015 IEEE 29th International Conference on Advanced Information Networking and Applications . 2015 : 414 - 419 .

KATZ-BASSETT E , JOHN J P , KRISHNAMURTHY A , et al . Towards IP geolocation using delay and topology measurements [C ] // Proceedings of the 6th ACM SIGCOMM Conference on Internet Measurement . 2006 : 71 - 84 .

ZU S , LUO X , LIU S , et al . City-level IP geolocation algorithm based on PoP network topology [J ] . IEEE Access , 2018 , 6 : 64867 - 64875 .

MILO R , SHEN-ORR S , ITZKOVITZ S , et al . Network motifs:simple building blocks of complex networks [J ] . Science , 2002 , 298 ( 5594 ): 824 - 827 .

LI R , SUN Y , HU J , et al . Street-level landmark evaluation based on nearest routers [J ] . Security and Communication Networks , 2018 , 2018 : 1 - 12 .

LUCKIE M . Scamper:a scalable and extensible packet prober for active measurement of the internet [C ] // ACM SIGCOMM Conference on Internet Measurement . 2010 : 239 - 245 .

AUGUSTIN B , CUVELLIER X , ORGOGOZO B , et al . Avoiding traceroute anomalies with paris traceroute [C ] // Proceedings of the 6th ACM SIGCOMM Conference on Internet Measurement 2006 . 2006 .

Views

300

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

MLAR:large-scale network alias resolution for IP geolocation

Efficient and safe software defined network topology discovery protocol

Dual-stack host discovery method based on SSDP and DNS-SD protocol

Related Author

Fuxiang YUAN

Fenlin LIU

Chong LIU

Yan LIU

Xiangyang LUO

Dong LI

Junqing YU

Yongpu GU

Related Institution

School of Cyberspace Security, Information Engineering University

State Key Laboratory of Mathematical Engineering and Advanced Computing

Network and Computation Center, Huazhong University of Science and Technology

School of Cyber Science and Engineering, Huazhong University of Science and Technology

⁰