Title
Dude, where’s that IP?: circumventing measurement-based IP geolocation
Abstract
Many applications of IP geolocation can benefit from geolocation that is robust to adversarial clients. These include applications that limit access to online content to a specific geographic region and cloud computing, where some organizations must ensure their virtual machines stay in an appropriate geographic region. This paper studies the applicability of current IP geolocation techniques against an adversary who tries to subvert the techniques into returning a forged result. We propose and evaluate attacks on both delay-based IP geolocation techniques and more advanced topology-aware techniques. Against delay-based techniques, we find that the adversary has a clear trade-off between the accuracy and the detectability of an attack. In contrast, we observe that more sophisticated topology-aware techniques actually fare worse against an adversary because they give the adversary more inputs to manipulate through their use of topology and delay information.
Year
Venue
Keywords
2010
USENIX Security Symposium
specific geographic region,sophisticated topology-aware technique,appropriate geographic region,delay-based technique,current ip geolocation technique,cloud computing,clear trade-off,advanced topology-aware technique,delay-based ip geolocation technique,ip geolocation,measurement-based ip geolocation
Field
DocType
Citations 
Internet privacy,Virtual machine,Adversary model,Computer science,Computer security,Geolocation,Computer network,Adversary,Adversarial system,Cloud computing
Conference
22
PageRank 
References 
Authors
0.98
16
4
Name
Order
Citations
PageRank
Phillipa Gill11504114.56
Yashar Ganjali2144488.79
Bernard Wong320112.82
D. Lie495355.14