John Heidemann / Papers / Assessing Co-Locality of IP Blocks

Assessing Co-Locality of IP Blocks
Manaf Gharaibeh, Han Zhang, Christos Papadopoulos and John Heidemann
USC/Information Sciences Institute

Citation

Manaf Gharaibeh, Han Zhang, Christos Papadopoulos and John Heidemann. Assessing Co-Locality of IP Blocks. Proceedings of the 19th IEEE Global Internet Symposium (San Francisco, CA, USA, Apr. 2016). [PDF] [alt PDF]

Abstract

Many IP Geolocation services and applications assume that all IP addresses with the same /24 IPv4 prefix (a /24 block) are in the same location. For blocks that contain addresses in very different locations (such blocks identifying network backbones), this assumption can result in large geolocation error. This paper evaluates this assumption using a large dataset of 1.41M /24 blocks extracted from a delay measurements dataset for the entire responsive IPv4 address space. We use hierarchal clustering to find clusters of IP addresses with similar observed delay measurements within /24 blocks. Blocks with multiple clusters often span different geographic locations. We evaluate this claim against two ground-truth datasets, confirming that 93% of identified multi-cluster blocks are true positives with multiple locations, while only 13% of blocks identified as single-cluster appear to be multi-location in ground truth. Applying the clustering process to the whole dataset suggests that about 17% (247K) of blocks are likely multi-location.

Bibtex Citation

@inproceedings{Gharaibeh16a,
  author = {Gharaibeh, Manaf and Zhang, Han and Papadopoulos, Christos and Heidemann, John},
  title = {Assessing Co-Locality of {IP} Blocks},
  booktitle = {Proceedings of the 19th IEEE Global Internet Symposium},
  year = {2016},
  sortdate = {2016-04-11},
  project = {ant, lacrend, retrofuture},
  jsubject = {topology_modeling},
  month = apr,
  address = {San Francisco, CA, USA},
  publisher = {Springer},
  jlocation = {johnh: pafile},
  url = {https://ant.isi.edu/%7ejohnh/PAPERS/Gharaibeh16a.html},
  pdfurl = {https://ant.isi.edu/%7ejohnh/PAPERS/Gharaibeh16a.pdf},
  myorganization = {USC/Information Sciences Institute},
  copyrightholder = {Springer},
  copyrightterms = {
  An author may self-archive an author-created version of his/her
  article on his/her own website and or in his/her institutional
  repository. He/she may also deposit this version on his/her funder's
  or funder's designated repository at the funder's request or as a
  result of a legal obligation, provided it is not made publicly
  available until 12 months after official publication. He/she may not
  use the publisher's PDF version, which is posted on
  \url{www.springerlink.com}, for the purpose of self-archiving or
  deposit. Furthermore, the author may only post his/her version
  provided acknowledgement is given to the original source of
  publication and a link is inserted to the published article on
  Springer's website. The link must be accompanied by the following
  text: ``The final publication is available at www.springerlink.com''.
  }
}

Copyright

An author may self-archive an author-created version of his/her article on his/her own website and or in his/her institutional repository. He/she may also deposit this version on his/her funder’s or funder’s designated repository at the funder’s request or as a result of a legal obligation, provided it is not made publicly available until 12 months after official publication. He/she may not use the publisher’s PDF version, which is posted on \urlwww.springerlink.com, for the purpose of self-archiving or deposit. Furthermore, the author may only post his/her version provided acknowledgement is given to the original source of publication and a link is inserted to the published article on Springer’s website. The link must be accompanied by the following text: “The final publication is available at www.springerlink.com”.
Copyright © by John Heidemann