Assessing the geographic resolution of exhaustive tabulation for - PowerPoint PPT Presentation

Assessing the geographic resolution of exhaustive tabulation for geolocating Internet hosts S. Siwpersad, S. Uhlig B. Gueye Delft University of Technology Universite de Liege The Netherlands Belgium 1 Vermelding onderdeel organisatie

Agenda • Introduction • Database-driven IP geolocation • Measurement-based IP geolocation • Geographic resolution of databases • Conclusions 2 OUTLINE

Introduction • GPS-based geolocation • Satellite information • Exact location • IP geolocation • Round trip time • Inferred location 3 PART I - INTRODUCTION

Agenda • Introduction • Database-driven IP geolocation • Measurement-based IP geolocation • Geographic resolution of databases • Conclusions 4 OUTLINE

Structure of databases • IP blocks • Geographic location names • Geographic coordinates • Additional information • Example of database records: 5 PART II - DATABASES

Information sources for databases DNS: • Whois: • User submitted information • 6 PART II - DATABASES

Commercial geolocation databases • Maxmind • 110 thousand cities • 3 million IP blocks (74% city-level, 4% country-level) • 2 billion IP addresses • Hexasoft • 15 thousand cities • 5 million IP blocks (67% city-level, 33% country-level) • 4 billion IP addresses 7 PART II - DATABASES

Span of a city- or country name DELFT AMSTERDAM LOS TO TO ANGELES ROTTERDAM MILAN TO 8 PART II - DATABASES NEW YORK

Size of the largest cities NEW YORK BERLIN ROTTERDAM DUBLIN 9 PART II - DATABASES

Size of countries USA TURKEY NETHERLANDS VATICAN CITY 10 PART II - DATABASES

Differences between the databases ROTTERDAM LOS TO ANGELES 11 PART II -DATABASES ANTWERP TO NEW YORK

Drawbacks of databases • Staleness of the location information • Incompleteness of the records within databases • Uncertainty on the used sources and methodology • Coarse granularity of the region • Discrete solution space 12 PART II - DATABASES

Advantages of databases • Easy deployment • Fast lookups • Resource inexpensive • Suited for typical applications • Reasonably priced 13 PART II - DATABASES

Agenda • Introduction • Database-driven IP geolocation • Measurement-based IP geolocation • Geographic resolution of databases • Conclusions 14 OUTLINE

Constraint-based geolocation 15 PART III - MEASUREMENTS

Area of the confidence region MALTA PORTUGAL USA 16 PART III - MEASUREMENTS

Limitations of measurements • Relies on replies from probing • Costly in terms of time and network resources • Unwanted distortions inherent to measurements 17 PART III - MEASUREMENTS

Advantages of measurements • Up-to-date location information • Higher accuracy and finer granularity • Confidence on area or location estimate • Continuous solution space 18 PART III - MEASUREMENTS

Presentation outline • Introduction • Database-driven IP geolocation • Measurement-based IP geolocation • Geographic resolution of databases • Conclusions 19 OUTLINE

Absolute resolution of databases WITHIN CONFIDENCE REGION OUTSIDE CONFIDENCE REGION 20 PART IV – RESOLUTION

Relative resolution of databases WITHIN CONFIDENCE REGION OUTSIDE CONFIDENCE REGION 21 PART IV – RESOLUTION

Presentation Outline • Introduction • Database-driven IP geolocation • Measurement-based IP geolocation • Investigation on the resolution of databases • Conclusions 22 OUTLINE

Conclusions • Databases need improvements: • more complete records • meta-data about methodology • Measurements are not always possible, but desirable for better confidence, precision and validation • Resolution of databases with respect to CBG is poor 23 PART V - CONCLUSION

Future work • Investigate the quality of the information used for databases • Add information in databases records (e.g. confidence) • Automated IP geolocation method selection (active vs. passive) 24 PART V - CONCLUSION