Delay-based Identification of Internet Block Movement

Delay-based Identification of Internet Block Movement. Gharaibeh, M., Papadopoulos, C., Heidemann, J., & Partridge, C. Technical Report CS-20-101, Colorado State University Computer Science Department , April, 2020.

Paper abstract bibtex

Some IP blocks occasionally change their physical location, such as when blocks are transferred to different organizations, or repurposed within an organization. IP geolocation systems need to identify such changes to provide accurate results for location-dependent applications such as geo-blocking and online fraud prevention. We propose an efficient method to identify IP blocks that move, since full geolocation is expensive and unnecessary for blocks that do not move. Our approach uses persistent changes in latency as an indicator of block movement, tracking all ping-responsive IPv4 /24 blocks from a handful of globally distributed vantage points. We estimate around 2.1% of the 3.77M /24 blocks we studied have changed location at least once in the last 3 months of 2018. We find that the remaining blocks were consistently RTT-stable during the same period, suggesting that their locations were also stable. We validate a random sample of blocks we identify as moving and confirm 80% (41 of 51) through traceroutes.

@TechReport{Gharaibeh20b,
        author =        "Manaf Gharaibeh and Christos Papadopoulos and
 John Heidemann and Craig Partridge",
 title = "Delay-based Identification of Internet Block Movement",
        institution =   "Colorado State University " # " Computer Science Department ",
        year =          2020,
	sortdate = "2020-04-07",
	project = "ant, lacrend, retrofuture",
	jsubject = "topology_modeling",
        number =     "CS-20-101",
        month =      apr,
        jlocation =   "johnh: pafile",
        keywords =   "trinocular, geolocation, block movement",
        otherurl =        "https://www.cs.colostate.edu/TechReports/Reports/2020/tr20-101.pdf",
	url =		"https://ant.isi.edu/%7ejohnh/PAPERS/Gharaibeh20b.html",
	pdfurl =		"https://ant.isi.edu/%7ejohnh/PAPERS/Gharaibeh20b.pdf",
	myorganization =	"USC/Information Sciences Institute",
	copyrightholder = "authors",
	abstract = "Some IP blocks occasionally change their physical location, such as
when blocks are transferred to different organizations, or repurposed
within an organization. IP geolocation systems need to identify such
changes to provide accurate results for location-dependent
applications such as geo-blocking and online fraud prevention. We
propose an efficient method to identify IP blocks that move, since
full geolocation is expensive and unnecessary for blocks that do not
move. Our approach uses persistent changes in latency as an indicator
of block movement, tracking all ping-responsive IPv4 /24 blocks from a
handful of globally distributed vantage points. We estimate around
2.1\% of the 3.77M /24 blocks we studied have changed location at least
once in the last 3 months of 2018. We find that the remaining blocks
were consistently RTT-stable during the same period, suggesting that
their locations were also stable. We validate a random sample of
blocks we identify as moving and confirm 80\% (41 of 51) through
traceroutes."
,}

Downloads: 0

{"_id":"AZWbxLJvA4bZaR4G7","bibbaseid":"gharaibeh-papadopoulos-heidemann-partridge-delaybasedidentificationofinternetblockmovement-2020","author_short":["Gharaibeh, M.","Papadopoulos, C.","Heidemann, J.","Partridge, C."],"bibdata":{"bibtype":"techreport","type":"techreport","author":[{"firstnames":["Manaf"],"propositions":[],"lastnames":["Gharaibeh"],"suffixes":[]},{"firstnames":["Christos"],"propositions":[],"lastnames":["Papadopoulos"],"suffixes":[]},{"firstnames":["John"],"propositions":[],"lastnames":["Heidemann"],"suffixes":[]},{"firstnames":["Craig"],"propositions":[],"lastnames":["Partridge"],"suffixes":[]}],"title":"Delay-based Identification of Internet Block Movement","institution":"Colorado State University Computer Science Department ","year":"2020","sortdate":"2020-04-07","project":"ant, lacrend, retrofuture","jsubject":"topology_modeling","number":"CS-20-101","month":"April","jlocation":"johnh: pafile","keywords":"trinocular, geolocation, block movement","otherurl":"https://www.cs.colostate.edu/TechReports/Reports/2020/tr20-101.pdf","url":"https://ant.isi.edu/%7ejohnh/PAPERS/Gharaibeh20b.html","pdfurl":"https://ant.isi.edu/%7ejohnh/PAPERS/Gharaibeh20b.pdf","myorganization":"USC/Information Sciences Institute","copyrightholder":"authors","abstract":"Some IP blocks occasionally change their physical location, such as when blocks are transferred to different organizations, or repurposed within an organization. IP geolocation systems need to identify such changes to provide accurate results for location-dependent applications such as geo-blocking and online fraud prevention. We propose an efficient method to identify IP blocks that move, since full geolocation is expensive and unnecessary for blocks that do not move. Our approach uses persistent changes in latency as an indicator of block movement, tracking all ping-responsive IPv4 /24 blocks from a handful of globally distributed vantage points. We estimate around 2.1% of the 3.77M /24 blocks we studied have changed location at least once in the last 3 months of 2018. We find that the remaining blocks were consistently RTT-stable during the same period, suggesting that their locations were also stable. We validate a random sample of blocks we identify as moving and confirm 80% (41 of 51) through traceroutes.","bibtex":"@TechReport{Gharaibeh20b,\n author = \"Manaf Gharaibeh and Christos Papadopoulos and\n John Heidemann and Craig Partridge\",\n title = \"Delay-based Identification of Internet Block Movement\",\n institution = \"Colorado State University \" # \" Computer Science Department \",\n year = 2020,\n\tsortdate = \"2020-04-07\",\n\tproject = \"ant, lacrend, retrofuture\",\n\tjsubject = \"topology_modeling\",\n number = \"CS-20-101\",\n month = apr,\n jlocation = \"johnh: pafile\",\n keywords = \"trinocular, geolocation, block movement\",\n otherurl = \"https://www.cs.colostate.edu/TechReports/Reports/2020/tr20-101.pdf\",\n\turl =\t\t\"https://ant.isi.edu/%7ejohnh/PAPERS/Gharaibeh20b.html\",\n\tpdfurl =\t\t\"https://ant.isi.edu/%7ejohnh/PAPERS/Gharaibeh20b.pdf\",\n\tmyorganization =\t\"USC/Information Sciences Institute\",\n\tcopyrightholder = \"authors\",\n\tabstract = \"Some IP blocks occasionally change their physical location, such as\nwhen blocks are transferred to different organizations, or repurposed\nwithin an organization. IP geolocation systems need to identify such\nchanges to provide accurate results for location-dependent\napplications such as geo-blocking and online fraud prevention. We\npropose an efficient method to identify IP blocks that move, since\nfull geolocation is expensive and unnecessary for blocks that do not\nmove. Our approach uses persistent changes in latency as an indicator\nof block movement, tracking all ping-responsive IPv4 /24 blocks from a\nhandful of globally distributed vantage points. We estimate around\n2.1\\% of the 3.77M /24 blocks we studied have changed location at least\nonce in the last 3 months of 2018. We find that the remaining blocks\nwere consistently RTT-stable during the same period, suggesting that\ntheir locations were also stable. We validate a random sample of\nblocks we identify as moving and confirm 80\\% (41 of 51) through\ntraceroutes.\"\n,}\n\n","author_short":["Gharaibeh, M.","Papadopoulos, C.","Heidemann, J.","Partridge, C."],"bibbaseid":"gharaibeh-papadopoulos-heidemann-partridge-delaybasedidentificationofinternetblockmovement-2020","role":"author","urls":{"Paper":"https://ant.isi.edu/%7ejohnh/PAPERS/Gharaibeh20b.html"},"keyword":["trinocular","geolocation","block movement"],"metadata":{"authorlinks":{}}},"bibtype":"techreport","biburl":"https://bibbase.org/f/dHevizJoWEhWowz8q/johnh-2023-2.bib","dataSources":["YLyu3mj3xsBeoqiHK","fLZcDgNSoSuatv6aX","fxEParwu2ZfurScPY","7nuQvtHTqKrLmgu99"],"keywords":["trinocular","geolocation","block movement"],"search_terms":["delay","based","identification","internet","block","movement","gharaibeh","papadopoulos","heidemann","partridge"],"title":"Delay-based Identification of Internet Block Movement","year":2020}