Geolocation and verification of IP-addresses with specific focus on IPv6

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 8300 LNCS, Issue , 2013, Pages 151-170

  Koch, Robert ^a   Golling, Mario ^a   Rodosek, Gabi Dreo ^a  

^a BUNDESWEHR UNIVERSITY MUNICH   (Germany)

Author keywords

Attack attribution; IP Geolocation; IPv6; Network analysis; Prosecution of computer fraud

Indexed keywords

EID: 84894218723     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-319-03584-0_12     Document Type: Conference Paper

References (65)

1. Internet Corporation for Assigned Names and Numbers (ICANN), Number Resources (2013), https://www.iana.org/numbers
2. CSN interviews Frank Bobo, "You can really do that?" - the power of Geolocation technology, ClientSide News Magazine 10(6), 6-9 (November/December 2010)
3. Mandiant, APT1 - Exposing One of China's Cyber Espionage Units (2013), http://intelreport.mandiant.com/Mandiant-APT1-Report.pdf
4. Jie, C.: Ministry of National Defense, The People's Republic of China, China has no cyber warfare troops: spokesman (2013), http://eng.mod.gov.cn/ Press/2013-03/01/content-4434894.htm
5. Lam, L.: South China Morning Post, Edward Snowden: US government has been hacking Hong Kong and China for years (2013), http://www.scmp.com/news/hong- kong/article/1259508/edward-snowden-us-government-has-been-hacking-hong-kong- and-china
6. Endo, P., Sadok, D.: Whois based geolocation: A strategy to geolocate internet hosts. In: 2010 24th IEEE International Conference on Advanced Information Networking and Applications (AINA), pp. 408-413. IEEE (2010)
7. Postel, J.: Internet Protocol, RFC 791 (1981)
8. BGPexpert.com, 2010 IPv4 Address Use Report (July 27, 2013), http://bgpexpert.com/addrspace2010.php
9. Hagen, S.: IPv6. Grundlagen - Funktionalität - Integration, 2nd edn. Sunny Edition (2007)
10. Deering, S., Hinden, R.: Internet Protocol, Version 6 (IPv6), RFC 2460 (1998)
11. Stockebrand, B.: IPv6 in Practice: A Unixer's Guide to the Next Generation Internet, 2007th edn. Springer (2006)
12. Endo, P.T., Sadok, D.F.H.: Whois Based Geolocation: a strategy to geolocate Internet Hosts, IEEE International Conference on Advanced Information Networking and Applications, Tech. Rep. (2010)
13. Dahnert, A.: HawkEyes: An advanced IP Geolocation approach: IP Geolocation using semantic and measurement based techniques. In: Cybersecurity Summit, Second Worldwide (WCS) (June 2011)
14. Eriksson, B., Barford, P., Maggs, B., Nowak, R.: Posit: An Adaptive Framework for Lightweight IP Geolocation, BU/CS, Tech. Rep. (July 2011)
15. Padmanabhan, V.N., Subramanian, L.: An investigation of geographic mapping techniques for internet host, ACM SIGCOMM, Tech. Rep. (2001)
16. Stiemert, L.: Geolokalisation - Verfahren und Methoden, Seminararbeit, Univer-sität der Bundeswehr München, Institut für Technische Informatik (October 2011) (unpublished)
17. Thorvaldsen, Ø. E.: Geographical location of internet hosts using a multi-agent system, Ph.D. dissertation, Norwegian University of Science and Technology (2006)
18. Guo, C., Liu, Y., Shen, W., Wang, H.J., Yu, Q., Zhang, Y.: Mining the web and the internet for accurate ip address geolocations, INFOCOM, Tech. Rep. (2009)
19. MaxMind, Inc., MaxMind Geolocation Service (August 19, 2013), http://www.maxmind.com
20. Quova, Inc., Quova's geolocation services (August 19, 2013), http://www.quova.com/
21. Huffaker, B., Fomenkov, M., Claffy, K.: Geocompare: a comparison of public and commercial geolocation databases, Network Mapping and Measurement Conference (NMMC), Tech. Rep. (May 2011)
22. Poese, I., Kaafar, M.A., Donnet, B., Gueye, B., Uhlig, S.: IP Geolocation Databases: Unreliable? Deutsche Telekom Lab./TU Berlin, Germany, Tech. Rep. (March 2011)
23. Shavitt, Y., Zilberman, N.: A Study of Geolocation Databases, School of Electrical Engineering, Tech. Rep. (July 2010)
24. Laki, S., Mátray, P., Hága, P., Sebók, T., Csabai, I., Vattay, G.: Spotter: A Model Based Active Geolocation Service, IEEE INFOCOM, Tech. Rep. (2011)
25. Laki, S., Mátray, P., Hága, P., Csabai, I., Vattay, G.: A model based approach for improving router geolocation. Computer Networks 54, 1490-1501 (2010)
26. Siwpersad, S.S., Gueye, B., Uhlig, S.: Assessing the geographic resolution of exhaustive tabulation for geolocating internet hosts. In: Claypool, M., Uhlig, S. (eds.) PAM 2008. LNCS, Vol. 4979, pp. 11-20. Springer, Heidelberg (2008)
27. Daigle, L.: WHOIS Protocol Specification, RFC 3912 (September 2004)
28. Moore, D., Periakaruppan, R., Donohoe, J., Claffy, K.: Where in the world is netgeo.caida.org? INET, Tech. Rep. (2000)
29. Mockapetris, P.: Domain Names - Concepts and Facilities, RFC 1034 (1987)
30. Internet Assigned Numbers Authority (IANA), IANA (March 1, 2013), http://www.iana.org/
31. Davis, C., Vixie, P., Goodwin, T., Dickinson, A.: A means for expressing location information in the domain name system, RFC 1876 (1996)
32. Wang, Y., Burgener, D., Flores, M., Kuzmanovic, A., Huang, C.: Towards Street-Level Client-Independent IP Geolocation, USENIX, Tech. Rep. (März 2011)
33. Coppens, J., Markatos, E.P., Novotny, J., Polychronakis, M., Smotlacha, V., Ubik, S.: SCAMPI - a scaleable monitoring platform for the Internet. In: Proceedings of the 2nd International Workshop on Inter-Domain Performance and Simulation, IPS 2004 (March 2004)
34. Padmanabhan, V., Subramanian, L.: An investigation of geographic mapping techniques for internet hosts. In: ACM SIGCOMM Computer Communication Review, vol. 31, pp. 173-185. ACM (2001)
35. Ziviani, A., Fdida, S., de Rezende, J., Duarte, O.: Improving the accuracy of measurement-based geographic location of internet hosts. Computer Networks 47(4), 503-523 (2005)
36. Gueye, M.C.B., Ziviani, A., Fdida, S.: Constraint-based geolocation of internet hosts, IEEE/ACM Transactions on Networking, Tech. Rep. (2004)
37. Gueye, B., Ziviani, A., Crovella, M., Fdida, S.: Constraint-based geolocation of internet hosts. In: Proceedings of the 4th ACM SIGCOMM Conference on Internet Measurement, pp. 288-293. ACM (2004)
38. Gueye, B., Uhlig, S., Ziviani, A., Fdida, S.: Leveraging buffering delay estimation for geolocation of internet hosts. In: Boavida, F., Plagemann, T., Stiller, B., West-phal, C., Monteiro, E. (eds.) NETWORKING 2006. LNCS, Vol. 3976, pp. 319-330. Springer, Heidelberg (2006)
39. Laki, S., Mátray, P., Hága, P., Sebok, T., Csabai, I., Vattay, G.: Spotter: A model based active geolocation service. In: 2011 Proceedings of the IEEE INFOCOM, pp. 3173-3181. IEEE (2011)
40. Wong, B., Stoyanov, I., Sirer, E.: Octant: A comprehensive framework for the geolocalization of internet hosts. In: Proceedings of the NSDI, vol. 7 (2007)
41. Trostle, J., Matsuoka, H., Tariq, M.M.B., Kempf, J., Kawahara, T., Jain, R.: Cryp-tographically protected prefixes for location privacy in ipv6. In: Martin, D., Serjantov, A. (eds.) PET 2004. LNCS, Vol. 3424, pp. 142-166. Springer, Heidelberg (2005)
42. Heuse, M.: Recent advances in IPv6 insecurities, 27th Chaos Communication Congress (27c3) (December 2010)
43. Moore, D., Periakaruppan, R., Donohoe, J., Claffy, K.: Where in the world is netgeo. caida. org. INET (2000)
44. Cooperative Association for Internet Data Analysis. NetGeo, http://www.caida.org/tools/utilities/netgeo/
45. Koch, R., Golling, M., Rodosek, G.D.: Advanced Geolocation of IP Addresses. In: International Conference on Communication and Network Security (ICCNS), pp. 1-10 (2013)
46. Jgsoft Associates. IP2Geo: Frequently Asked Questions, How accurate is IP-Country-Region-City-ISP database? (2013), http://www.ip2geo.net/ip2location/ ip-country-region-city-isp-faq.html
47. Wong, B., Stoyanov, I., Sirer, E.G.: Geolocalization on the internet through constraint satisfaction. In: Proceedings of the 3rd Conference on USENIX Workshop on Real, Large Distributed Systems, p. 1 (2006)
48. Guo, C., Liu, Y., Shen, W., Wang, H.J., Yu, Q., Zhang, Y.: Mining the web and the internet for accurate ip address geolocations. In: IEEE INFOCOM 2009, pp. 2841-2845. IEEE (2009)
49. Gueye, B., Uhlig, S., Fdida, S.: Investigating the Imprecision of IP Block-Based Geolocation. In: Uhlig, S., Papagiannaki, K., Bonaventure, O. (eds.) PAM 2007. LNCS, Vol. 4427, pp. 237-240. Springer, Heidelberg (2007)
50. Zander, S.: How Accurate is IP Geolocation Based on IP Allocation Data? Centre for Advanced Internet Architectures (CAIA), Tech. Rep. (May 2012)
51. HostIP, My IP Address Lookup and GeoTargeting Community Geotarget IP Project (July 29, 2013), http://www.hostip.info
52. IP2Location (July 29, 2013), http://www.ip2location.com/
53. IPInfoDB (July 28, 2013), http://ipinfodb.com/
54. IPInfoDB. IPInfoDB - Free IP Address Geolocation Tools (September 09, 2013), http://ipinfodb.com/
55. Srinivasan, K., Venkatasubramanian, K.: Geography of the web - Design and Analysis of Algorithm, CSE 450/598, Arizona State University, Tech. Rep. (2003)
56. Huffaker, B., Fomenkov, M., Claffy, K.: Geocompare: a comparison of public and commercial geolocation databases. Technical Report, network, Mapping and Measurement Conference (NMMC) (May 2011)
57. Poese, I., Kaafar, M.A., Donnet, B., Gueye, B., Uhlig, S.: Ip geolocation databases: Unreliable? Deutsche Telekom Lab./TU Berlin, Technical Report (March 2011)
58. Siwpersad, S.S., Gueye, B., Uhlig, S.: Assessing the geographic resolution of exhaustive tabulation for geolocating internet hosts. In: Claypool, M., Uhlig, S. (eds.) PAM 2008. LNCS, Vol. 4979, pp. 11-20. Springer, Heidelberg (2008)
59. Shavitt, Y., Zilberman, N.: A study of geolocation databases, School of Electrical Engineering, Technical Report (July 2010)
60. Freedman, N.F.M.J., Vutukuru, M., Balakrishnan, H.: Geographic Locality of IP Prefixes, Internet Measurement Conference (IMC), Tech. Rep. (2005)
61. Stiemert, L.: Localisation and Advanced Evaluation of IP-Addresses with Focus on IPv6, Master's thesis, Institut für Technische Informatik, Universität der Bundeswehr München, Germany (2013), https://www.unibw.de/inf3/forschung/dreo/publikationen/ba-und-ma/ 2013-Stiemert-Geolocation.pdf
62. The Cooperative Association for Internet Data Analysis (CAIDA), Cooperative Association for Internet Data Analysis (March 01, 2013), http://www.caida.org/
63. RIPE Network Coordination Centre (RIPE NCC), Test Traffic Measurement Service (June 27, 2013), https://www.ripe.net/data-tools/stats/ttm/test-traffic- measurement-service/
64. Gummadi, K.P., Saroiu, S., Gribble, S.D.: King: Estimating Latency between Arbitrary Internet End Hosts. ACM IMW, Tech. Rep. (November 2002)
65. Leonard, D., Loguinov, D.: Turbo King: Framework for Large-Scale Internet Delay Measurements. INFOCOM, Tech. Rep. (2008)