Title of thesis : METROPOLITAN AREA NETWORK IP GEOLOCATION THROUGH WAVELET TECHNIQUES Choon Yik
نویسندگان
چکیده
Title of thesis: METROPOLITAN AREA NETWORK IP GEOLOCATION THROUGH WAVELET TECHNIQUES Choon Yik Lee, Master of Science, 2010 Thesis directed by: Professor Richard La Department of Electrical and Computer Engineering IP geolocation is the process of finding the geographic locations of Internet hosts. We will focus on Internet hosts in metropolitan area network(MAN). The Internet hosts will be under the same Internet service provider(ISP). Machines in close geographic distance will share almost identical network infrastructure due to having the same ISP. We propose two MAN IP geolocation techniques that are based on wavelets, e.g. wavelet density estimation and wavelet time-frequency analysis. Wavelet density estimation looks for similarity among RTT distributions of nearby machines. To achieve this, wavelet density estimation utilizes wavelets as orthonormal basis in L(R) to construct estimated probability density functions(pdfs) of RTT distributions. A symmetrized version of Kullback-Leibler divergence is devised to measure the similarity between two estimated pdfs. The second technique, wavelet time-frequency analysis, explores a common pattern in frequency content evolutions over time of the RTT sequences of nearby machines. Wavelet timefrequency analysis employs wavelets to analyze frequency contents of RTT sequences over short time-intervals. Sudden rises of frequency content in RTT sequences can then be detected. We evaluate the performance of these two MAN IP geolocation techniques with data sets collected from our testbed. With these data sets, we analyze the effects of RTT sample size, RTT probing rate and landmark distribution to the performance of the techniques. METROPOLITAN AREA NETWORK IP GEOLOCATION THROUGH WAVELET TECHNIQUES
منابع مشابه
IP Geolocation in Metropolitan Area Networks
Existing techniques can geolocate an IP address to a metropolitan area. Through simulation, we evaluate the performance of these existing techniques within a metropolitan area network. We identify differences between metropolitan area networks and the wide area network. We describe and evaluate new techniques which are designed specifically for use on metropolitan area networks. We present Hop-...
متن کاملInternet Host Geolocation Based On Probabilistic Latency Models
The robust and scalable growth of the Internet has allowed value added services that provide enhanced user experience. Offering information based on geographic location to Internet users is one of the newest and notable advancements. Finding the geographical location of the user on the Internet, commonly referred to as geolocation, is one of the challenging problems currently addressed by the r...
متن کاملA model based approach for improving router geolocation
This study outlines two novel techniques which can be used in the area of IP geolocation. First we introduce a detailed path-latency model to be able to determine the overall propagation delays along the network paths more accurately. The knowledge of accurate propagation delay values then leads to more precise geographic distance estimation between hosts and measurement nodes. Besides these di...
متن کاملAdvanced Geolocation of IP Addresses
Tracing and locating the geographical location of users (Geolocation) is used extensively in today’s Internet. Whenever we, e.g., request a page from google we are unless there was a specific configuration made automatically forwarded to the page with the relevant language and amongst others, dependent on our location identified, specific commercials are presented. Especially within the area of...
متن کاملUsing Whois Based Geolocation and Google Maps API for support cybercrime investigations
A major challenge facing all law-enforcement and intelligence-gathering organizations is accurately and efficiently analyzing the growing volumes of crime data. Cybercrime refers to any crime that involves a computer and network, where computer may or may not play an instrumental part in the commission of the crime. Detection and investigation of cybercrime can likewise be difficult because bus...
متن کامل