1 / 25

Where’s WikiLeaks ?

Where’s WikiLeaks ?. GEOLOCATION SERVICE. A Model Based Active Geolocation Service. S. Laki* , P. Mátray , P. Hága, T. Sebők, I. Csabai, G. Vattay. Spotter :. Sándor Laki* Eötvös Loránd University Budapest, Hungary lakis@inf.elte.hu.

glynis
Download Presentation

Where’s WikiLeaks ?

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Where’sWikiLeaks?

  2. GEOLOCATION SERVICE • A Model Based ActiveGeolocation Service S. Laki*, P. Mátray, P. Hága, T. Sebők, I. Csabai, G. Vattay Spotter: Sándor Laki* Eötvös Loránd University Budapest, Hungary lakis@inf.elte.hu • The Project was supported by the European Union and co-financed by the European Social Fund (grant agreement no. TAMOP 4.2.1./B-09/1/KMR-2010-0003).

  3. Motivation • Location information can be useful for both private and corporate users • Targeted advertising on the web • Restricted content delivery • Location-based security check • Scientific applications • Measurement visualization • Network diagnostics • Analysing spatial properties • of the Intenet

  4. IP Geolocationingeneral PassiveGeolocation ActiveGeolocation • Geolinguistic • Registrybased • Whois, dns • Organizationalinfromation • Commercial databases • Maxmind, IPLigence, IP2Location, etc. rt1.lon.uk.geant2.net London, UK

  5. IP Geolocationingeneral PassiveGeolocation ActiveGeolocation • Geolinguistic • Registrybased • Whois, dns • Organizationalinfromation • Commercial databases • Maxmind, IPLigence, IP2Location, etc. rt1.lon.uk.geant2.net Large and geographicallydispersed IP blockscan be allocatedto a singleentity

  6. IP Geolocationingeneral PassiveGeolocation ActiveGeolocation Activeprobing Delay, topology, etc. Landmarks Withknownlocation Locationestimatesforeachindividual IP addresses • Geolinguistic • Registrybased • Whois, dns • Organizationalinfromation • Commercial databases • Maxmind, IPLigence, IP2Location, etc. rt1.lon.uk.geant2.net Large and geographicallydispersed IP blockscan be allocatedto a singleentity

  7. Activegeolocation ? Target to be localized

  8. Activegeolocation Landmarkswithknownlocation

  9. Activegeolocation 1010 ms 200 ms 501 ms 898 ms

  10. Activegeolocation Transformingdelaystogeographicaldistances

  11. Howtotransformnetworkdelaystogeographicaldistances?

  12. Ourdelay–distancemodel Referencedataset • Nodeswithknownlocation • ~700 PlanetLabnodes • Alltoall RTT measurements • mininmumdelays

  13. Ourdelay-distancemodel • Standardizedvalues, fitted normaldistribution • Approximatedby a standard normaldistribution • Geographicdistancesfollownormaldistribution • withparametersµ(t) and (t)for a givendelayt

  14. Evaluation The distances are normally distributed for a given RTT Foreach RTT theradial profile is approximatedby a normaldistribution (m(d) and s(d))=> which defines the spatial probability distribution of the target

  15. Evaluation – „Triangulation” • Landmarks:L1, … , Ln • DelaydifromLitoT: Lidi • The probabilitythattargetTresidesinregionH:

  16. Performance analysis • Estimatedaccuracyfor a geolocationgroundtruth • CAIDA’sGeolocationComparisionSurvey • More than20000 referencenodes • LocatedinNorthAmerica and in Europe InNorthAmerica 70% 35% 40% 9% 27% 2%

  17. The Online service

  18. Spotter - The geolocation service • online: free, easy to use • ~100 landmarks • Real timemeasurementsinthebackground • offline: batch mode • ~50k addresses/day • Fulllandmarkset • ~700 nodes • to fix: • DNS resolve problem • Sequentialqueuing visit and use!http://spotter.etomic.org

  19. Where’sWikiLeaks?

  20. Conclusion • Spotter is a measurementbasedgeolocation service available online • Basedon a probabilisticapproach • A noveldescription of delay-distancerelation • ValidatedonCAIDA’sGeolocationGroundTruth • 30 km and 75 km medianaccuracyinNorthAmerica and in Europe, resp. New challenges: • IPv6, Real timemeasurements, etc • The Internet topology and thedelaycharacteristicscould be changedinthefuture

  21. GEOLOCATION SERVICE Thankyouforyourattention! For more infopleasevisit http://spotter.etomic.org orsendme an email lakis@inf.elte.hu (Sándor Laki)

More Related