Poster: GeoResolver, An Accurate, Scalable, and Explainable Geolocation Technique Using DNS Redirection
Obtaining an accurate, explainable, Internet-scale IP geolocation dataset has been a longstanding goal of the research community. Despite decades of research on IP geolocation, no current technique can provide such a dataset. In particular, latency-based geolocation techniques do not scale, because, on one hand, we have thousands of available vantage points to perform measurements, but on the other hand, we have no way to select the right ones for each IP address. In this paper, we present GeoResolver, an efficient vantage point selection methodology, based on the assumption that two IP addresses that share a similar DNS redirection are likely to be geographically close together. GeoResolver performs nearly as well as a brute force approach using all the vantage points, geolocating 94% of the targets that could actually be geolocated at metro level by using all the vantage points, while using 4.3% of the probing budget compared to a state-of-the-art technique. We carefully design GeoResolver to be both accurate and scalable and with our implementation, we start a large-scale geolocation campaign.
Authors
- Kévin Vermeulen
- Olivier Fourmaux (ORCID: https://orcid.org/0000-0002-6885-9378)
- Timur Friedman (ORCID: https://orcid.org/0000-0002-1653-3552)
- Hugo Rimlinger (ORCID: https://orcid.org/0009-0000-0962-845X)
Institutions
- Centre National de la Recherche Scientifique (FR)
- Laboratoire d'Analyse et d'Architecture des Systèmes (FR)
- Sorbonne Université (FR)
- LIP6 (FR)
Publication Details
- Published
- 2024-11-22
- DOI
- https://doi.org/10.1145/3680121.3699884
- Citations
- 1
- Primary Topic
- Network Security and Intrusion Detection
- Type
- article
- Field-Weighted Citation Impact
- 0.35