Show simple item record

dc.contributor.advisorBeverly, Robert
dc.contributor.advisorRohrer, Justin P.
dc.contributor.authorKauffman, Bryan J.
dc.date.accessioned2021-11-10T20:07:20Z
dc.date.available2021-11-10T20:07:20Z
dc.date.issued2021-09
dc.identifier.urihttp://hdl.handle.net/10945/68339
dc.description.abstractCommercial IP geolocation databases provide a capability to associate IP addresses or prefixes to a physical location. These services provide critical information for emergency services, commercial entities, and government agencies. The accuracy of these databases can vary to a degree that degrades their utility to an unacceptable level, and the algorithms that are making location determinations are typically proprietary. This study seeks to identify patterns in, or otherwise characterize, the set of network prefixes that exhibit geolocation change between weekly snapshots of a particular commercial geolocation database: MaxMind. We employ ground-truth correlations using active Internet measurements to characterize discernable patterns of prefix movements in the database. By measuring round-trip times from known-location vantage points to prefixes with location changes, and identifying the closest vantage point to the likely actual prefix location, we categorize and correlate possible causes of location instability in MaxMind. We find that approximately 7.5% of MaxMind prefix-location variance possibly results from geolocation granularity changes. Our methodology demonstrates a scalable technique to use Internet measurements to characterize movement shown by geolocation databases. Finally, we propose methodology enhancements for future employment. This study illuminates the efficacy of IP geolocation databases for intelligence community, DOD, academic, and commercial use.en_US
dc.publisherMonterey, CA; Naval Postgraduate Schoolen_US
dc.rightsThis publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.en_US
dc.titleSOURCES OF CHANGE IN INTERNET PROTOCOL GEOLOCATION DATABASESen_US
dc.typeThesisen_US
dc.contributor.secondreaderKrenc, Thomas J.
dc.contributor.departmentComputer Science (CS)
dc.subject.authorInterneten_US
dc.subject.authorgeolocationen_US
dc.subject.authorInternet protocol geolocationen_US
dc.subject.authorIP geolocationen_US
dc.subject.authorInternet measurementen_US
dc.subject.authorRIPEen_US
dc.description.serviceLieutenant Commander, United States Navyen_US
etd.thesisdegree.nameMaster of Science in Computer Scienceen_US
etd.thesisdegree.levelMastersen_US
etd.thesisdegree.disciplineComputer Scienceen_US
etd.thesisdegree.grantorNaval Postgraduate Schoolen_US
dc.identifier.thesisid36694
dc.description.distributionstatementApproved for public release. Distribution is unlimited.en_US
dc.identifier.curriculumcode368, Computer Science


Files in this item

Thumbnail

This item appears in the following Collection(s)

Show simple item record