目标网络场景自适应的IP定位框架

祖铄迪; 丁世昌; 袁福祥; 罗向阳

doi:10.11959/j.issn.2096-109x.2023084

您当前的位置：

首页 >

文章列表页 >

目标网络场景自适应的IP定位框架

学术论文 | 更新时间：2024-06-03

- 目标网络场景自适应的IP定位框架
- Adaptive IP geolocation framework for target network scenarios
- 网络与信息安全学报 2023年9卷第6期页码：71-85
- 作者机构：
  
  1. 网络空间态势感知河南省重点实验室，河南郑州 450001
  2. 信息工程大学，河南郑州 450001
- 作者简介：
  
  [ "祖铄迪（1994- ），男，河北保定人，网络空间态势感知河南省重点实验室博士生，主要研究方向为网络空间资源测绘和IP定位" ]
  [ "丁世昌（1990- ），男，山东日照人，博士，网络空间态势感知河南省重点实验室讲师，主要研究方向为网络空间资源测绘和IP定位" ]
  [ "袁福祥（1991- ），男，山东济宁人，博士，网络空间态势感知河南省重点实验室讲师，主要研究方向为网络空间资源测绘和IP定位" ]
  [ "罗向阳（1978- ），男，湖北荆门人，博士，网络空间态势感知河南省重点实验室教授、博士生导师，主要研究方向为网络空间安全" ]
- 基金信息：
  
  国家自然科学基金;The National Natural Science Foundation of China(1804263);国家自然科学基金;TheNational Natural Science Foundation of China(62172435);国家重点研发计划;The National Key R＆D Program of China(2022YFB3102904);中原科技创新领军人才计划;Zhongyuan Science and Technology Innovation Leading Talent Project(214200510019);河南省科技攻关项目;The Key Science and Technology Project of Henan Province(222102210036);河南省科技攻关项目;The Key Science and Technology Project of Henan Province(232102211052)
- DOI：10.11959/j.issn.2096-109x.2023084
  中图分类号： TP393
- 网络首发：2023-12，
  
  纸质出版：2023-12-25
- 稿件说明：
移动端阅览
祖铄迪, 丁世昌, 袁福祥, 等. 目标网络场景自适应的IP定位框架[J]. 网络与信息安全学报, 2023,9(6):71-85.

Shuodi ZU, Shichang DING, Fuxiang YUAN, et al. Adaptive IP geolocation framework for target network scenarios[J]. Chinese Journal of Network and Information Security, 2023, 9(6): 71-85.
祖铄迪, 丁世昌, 袁福祥, 等. 目标网络场景自适应的IP定位框架[J]. 网络与信息安全学报, 2023,9(6):71-85. DOI： 10.11959/j.issn.2096-109x.2023084.

Shuodi ZU, Shichang DING, Fuxiang YUAN, et al. Adaptive IP geolocation framework for target network scenarios[J]. Chinese Journal of Network and Information Security, 2023, 9(6): 71-85. DOI： 10.11959/j.issn.2096-109x.2023084.

摘要

通过 IP 来定位目标位置是基于位置的服务的重要基础。当前研究者面向不同的网络场景，提出了不同实现原理的IP定位方法。但在不同的网络场景中，各类IP定位方法难以维持理想的定位效果。介绍了基于网络测量的 IP 定位的 3 种典型实现原理，分析了各类方法在不同网络场景下的优缺点，并提出了一种目标网络场景自适应的 IP 定位框架。该定位框架将目标在地标库中进行位置对比，初步判定目标的城市级位置并分布式部署探测源；随后获取目标所在城市的时延、拓扑、同子网地标等属性，并判定其所处网络场景；根据目标网络场景，选择合适类型的定位算法对目标 IP 进行定位，输出位置估计结果。通过在我国11个城市进行模拟定位实验，得到了在不同数量和分布的地标数据支撑下各类IP定位方法的多层次表现，结果显示所提框架的城市级定位成功率可达96.16%，街道级定位中值误差可达4.13 km，同时所提框架在不同的同子网地标数量和目标可达性条件下均能保持稳定的定位效果。实验结果验证了所提框架的有效性，并为IP定位研究提供新的思路。

Abstract

The target location can be determined through IP geolocation

serving as a vital foundation for location-based services.Researchers have proposed various IP geolocation algorithms with different implementation principles to cater to different network scenarios.However

maintaining an ideal geolocation effect proves challenging for these algorithms in diverse network scenarios.Three typical implementation principles for IP geolocation based on network measurement were introduced.The advantages and disadvantages of these methods in various network scenarios were analyzed

and an adaptive IP geolocation framework specifically tailored to target network scenarios was proposed.The geolocation framework was functioned as follows: initially

a preliminary city-level location estimation was obtained by comparing the target’s location with the landmark database.Then

detection sources were deployed in a distributed manner

and information such as delay

topology and same subnet landmarks for the target city was gathered to determine the network scenario.Finally

an appropriate geolocation method was employed to accurately estimate the target’s location according to the identified network scenario.Through simulation geolocation experiments in 11 cities of China

the multi-level performance of various IP geolocation methods supported by landmark data of different quantities and distributions was evaluated.The results indicate that the proposed framework achieves a city-level geolocation success rate of 96.16% and a median error of 4.13 km for street-level geolocation.Moreover

the framework demonstrates stable geolocation performance across different conditions

including varying same subnet landmark numbers and target accessibility.These experimental findings validate the effectiveness of the proposed framework and offer novel insights for IP geolocation research.

关键词

Keywords

references

NIU B , LI Q , ZHU X , et al . Enhancing privacy through caching in location-based services [C ] // 2015 IEEE Conference on Computer Communications (INFOCOM) . 2015 : 1017 - 1025 .

ZHENG X , CAI Z , LI J , et al . Location-privacy-aware review publication mechanism for local business service systems [C ] // 2017 IEEE Conference on Computer Communications (INFOCOM) . 2017 : 1 - 9 .

赵帆 , 罗向阳 , 刘粉林 . 网络空间测绘技术研究 [J ] . 网络与信息安全学报 , 2016 , 2 ( 9 ): 1 - 11 .

ZHAO F , LUO X Y , LIU F L . Research on cyberspace surveying and mapping technology [J ] . Chinese Journal of Network and Information Security , 2016 , 2 ( 9 ): 1 - 11 .

BURCH H , CHESWICK B . Mapping the internet [J ] . Computer , 1999 , 32 ( 4 ): 97 - 98 .

CHEN J , LIU F , ZHAO F , et al . A SC-vivaldi network coordinate system based method for IP geolocation [J ] . Journal of Internet Technology , 2016 , 17 ( 1 ): 119 - 127 .

郭莉 , 曹亚男 , 苏马婧 , 等 . 网络空间资源测绘:概念与技术 [J ] . 信息安全学报 , 2018 , 3 ( 4 ): 1 - 14 .

GUO L , CAO Y N , SU M J , et al . Cyberspace resources surveying and mapping:the concepts and technologies [J ] . Journal of Cyber Security , 2018 , 3 ( 4 ): 1 - 14 .

LIU C , LUO X , YUAN F , et al . RNBG:a ranking nodes based IP geolocation method [C ] // 2020 IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS) . 2020 : 80 - 84 .

ZHANG F , LIU F , XU R , et al . Street-level IP geolocation algorithm based on landmarks clustering [J ] . Computers Materials ＆Continua , 2021 , 66 ( 3 ): 3345 - 3361 .

DING S , LUO X , WANG J , et al . GNN-Geo:a graph neural network-based fine-grained IP geolocation framework [C ] // IEEE Transactions on Network Science and Engineering , 2023 : 1 - 18 .

方滨兴 . 从层次角度看网络空间安全技术的覆盖领域 [J ] . 网络与信息安全学报 , 2015 , 1 ( 1 ): 2 - 7 .

FANG B X . A hierarchy model on the research fields of cyberspace security technology [J ] . Chinese Journal of Network and Information Security , 2015 , 1 ( 1 ): 2 - 7 .

ZU S , LUO X , ZHANG F . IP-geolocater:a more reliable IP geolocation algorithm based on router error training [J ] . Frontiers of Computer Science , 2022 , 16 ( 1 ): 1 - 11 .

ZHAO F , LUO X , GAN Y , et al . IP geolocation based on identification routers and local delay distribution similarity [J ] . Concurrency and Computation:Practice and Experience , 2019 , 31 ( 22 ): 4722 .

WANG Y , BURGENER D , FLORES M , et al . Towards street-level client-independent IP geolocation [C ] // Proceedings of the 8th USENIX Conference on Networked Systems Design and Implementation . 2011 : 365 - 379 .

ZHAO F , XU R , LI R , et al . Street-level geolocation based on router multilevel partitioning [J ] . IEEE Access , 2019 , 7 : 59237 - 59248 .

ZU S , LUO X , DU S , et al . A delay deviation tolerance IP geolocation method with error estimation [J ] . Scientific Reports , 2022 , 12 ( 1 ): 1 - 15 .

MUKNE N , PAFFENROTH R . Probabilistic inference of Internet node geolocation with anomaly detection [C ] // 2017 IEEE International Symposium on Technologies for Homeland Security (HST) . 2017 : 1 - 6 .

WANG T , XU K , SONG J , et al . An optimization method for the geolocation databases of Internet hosts based on machine learning [J ] . Mathematical Problems in Engineering , 2015 , 2015 : 1 - 17 .

LI H , ZHANG P , WANG Z , et al . Changing IP geolocation from arbitrary database query towards multi-databases fusion [C ] // 2017 IEEE Symposium on Computers and Communications(ISCC) . 2017 : 1150 - 1157 .

POESE I , UHLIG S , KAAFAR M A , et al . IP geolocation databases:Unreliable [J ] . ACM SIGCOMM Computer Communication Review , 2011 , 41 ( 2 ): 53 - 56 .

SHAVITT Y , ZILBERMAN N . A geolocation databases study [J ] . IEEE Journal on Selected Areas in Communications , 2011 , 29 ( 10 ): 2044 - 2056 .

ZHAO F , SONG Y , LIU F , et al . City-level geolocation based on routing feature [C ] // 2015 IEEE 29th International Conference on Advanced Information Networking and Applications . 2015 : 414 - 419 .

KATZ-BASSETT E , JOHN J P , KRISHNAMURTHY A , et al . Towards IP geolocation using delay and topology measurements [C ] // Proceedings of the 6th ACM SIGCOMM Conference on Internet Measurement . 2006 : 71 - 84 .

ZU S , LUO X , LIU S , et al . City-level IP geolocation algorithm based on PoP network topology [J ] . IEEE Access , 2018 , 6 : 64867 - 64875 .

MILO R , SHEN-ORR S , ITZKOVITZ S , et al . Network motifs:simple building blocks of complex networks [J ] . Science , 2002 , 298 ( 5594 ): 824 - 827 .

LI R , SUN Y , HU J , et al . Street-level landmark evaluation based on nearest routers [J ] . Security and Communication Networks , 2018 , 2018 : 1 - 12 .

LUCKIE M . Scamper:a scalable and extensible packet prober for active measurement of the internet [C ] // ACM SIGCOMM Conference on Internet Measurement . 2010 : 239 - 245 .

AUGUSTIN B , CUVELLIER X , ORGOGOZO B , et al . Avoiding traceroute anomalies with paris traceroute [C ] // Proceedings of the 6th ACM SIGCOMM Conference on Internet Measurement 2006 . 2006 .

浏览量

300

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

MLAR：面向IP定位的大规模网络别名解析

高效安全的软件定义网络拓扑发现协议

基于SSDP和DNS-SD协议的双栈主机发现方法及其安全分析