Delay-based Identification of Internet Block Movement
Manaf Gharaibeh, Christos Papadopoulos, John Heidemann and Craig Partridge
USC/Information Sciences Institute
Citation
Manaf Gharaibeh, Christos Papadopoulos, John Heidemann and Craig Partridge. Delay-based Identification of Internet Block Movement. Technical Report CS-20-101. Colorado State University Computer Science Department . [PDF] [alt PDF]
Abstract
Some IP blocks occasionally change their physical location, such as when blocks are transferred to different organizations, or repurposed within an organization. IP geolocation systems need to identify such changes to provide accurate results for location-dependent applications such as geo-blocking and online fraud prevention. We propose an efficient method to identify IP blocks that move, since full geolocation is expensive and unnecessary for blocks that do not move. Our approach uses persistent changes in latency as an indicator of block movement, tracking all ping-responsive IPv4 /24 blocks from a handful of globally distributed vantage points. We estimate around 2.1% of the 3.77M /24 blocks we studied have changed location at least once in the last 3 months of 2018. We find that the remaining blocks were consistently RTT-stable during the same period, suggesting that their locations were also stable. We validate a random sample of blocks we identify as moving and confirm 80% (41 of 51) through traceroutes.Bibtex Citation
@techreport{Gharaibeh20b,
author = {Gharaibeh, Manaf and Papadopoulos, Christos and Heidemann, John and Partridge, Craig},
title = {Delay-based Identification of Internet Block Movement},
institution = {Colorado State University Computer Science Department },
year = {2020},
sortdate = {2020-04-07},
project = {ant, lacrend, retrofuture},
jsubject = {topology_modeling},
number = {CS-20-101},
month = apr,
jlocation = {johnh: pafile},
keywords = {trinocular, geolocation, block movement},
otherurl = {https://www.cs.colostate.edu/TechReports/Reports/2020/tr20-101.pdf},
url = {https://ant.isi.edu/%7ejohnh/PAPERS/Gharaibeh20b.html},
pdfurl = {https://ant.isi.edu/%7ejohnh/PAPERS/Gharaibeh20b.pdf},
myorganization = {USC/Information Sciences Institute},
copyrightholder = {authors}
}