Paper Info
Title
CPV: Delay-Based Location Verification for the Internet.
Abstract
The number of location-aware services over the Internet continues growing. Some of these require the client’s geographic location for security-sensitive applications. Examples include location-aware authentication, location-aware access policies, fraud prevention, complying with media licensing, and regulating online gambling/voting. An adversary can evade existing geolocation techniques, e.g., by faking GPS coordinates or employing a non-local IP address through proxy and virtual private networks. We devise Client Presence Verification (CPV), a delay-based verification technique designed to verify an assertion about a device’s presence inside a prescribed geographic region. CPV does not identify devices by their IP addresses. Rather, the device’s location is corroborated in a novel way by leveraging geometric properties of triangles, which prevents an adversary from manipulating measured delays. To achieve high accuracy, CPV mitigates Internet path asymmetry using a novel method to deduce one-way application-layer delays to/from the client’s participating device, and mines these delays for evidence supporting/refuting the asserted location. We evaluate CPV through detailed experiments on PlanetLab, exploring various factors that affect its efficacy, including the granularity of the verified location, and the verification time. Results highlight the potential of CPV for practical adoption.
Year
DOI
Venue
2017
10.1109/TDSC.2015.2451614
IEEE Trans. Dependable Sec. Comput.
Keywords
Field
DocType
Delays,Internet,Protocols,Geology,Synchronization,IP networks,Accuracy
Synchronization,PlanetLab,Authentication,Computer science,Computer security,Geolocation,Location-based service,Computer network,Adversary,Private network,The Internet
Journal
Volume
Issue
ISSN
14
2
1545-5971
Citations 
PageRank 
References 
4
0.39
31
Authors
3
Name
Order
Citations
PageRank
AbdelRahman Abdou1164.43
Ashraf Matrawy214626.98
P. C. van Oorschot34230414.39