一种多接口路由器地理定位方法

朱金玉; 张宇; 曾良伟; 余卓勋; 张宏莉

引用本文：

朱金玉,张宇,曾良伟,余卓勋,张宏莉.一种多接口路由器地理定位方法[J].信息安全学报,2018,3(4):15-24 [点击复制]
ZHU Jinyu,ZHANG Yu,ZENG Liangwei,YU Zhuoxun,ZHANG Hongli.Geolocation For Multi-Interface Routers[J].Journal of Cyber Security,2018,3(4):15-24 [点击复制]

本文已被：浏览 6349次下载 5837次	码上扫一扫！
一种多接口路由器地理定位方法
朱金玉, 张宇, 曾良伟, 余卓勋, 张宏莉
0 字体:加大+\|默认\|缩小-
(哈尔滨工业大学计算机科学与技术学院计算机网络与信息安全技术研究中心哈尔滨中国 150001)

摘要:

在网络空间测绘中，如何将虚拟拓扑中设备节点定位到现实世界中地理位置是一个研究难点。以往IP地理定位工作多以IP地址为单位，缺少以路由器为单位的定位研究。本文利用同一台路由器上不同接口IP地址位置相同，相连的路由器间地理位置相近这两个事实，提出一种多接口路由器地理定位方法，包括接口选举方法、邻居选举方法、综合法，来定位路由器地理位置。实验结果表明，与相关数据集相比，在可定位路由器的覆盖率和定位准确率上都有明显提升。在覆盖率上，国家级达到99.84%，城市级达到96.00%，比相关数据集分别高出0.93%和36.48%；在IXP数据验证准确率上，国家级达到82.51%，城市级达到59.45%，比相关数据集分别高出9.91%和27.20%。

关键词: 多接口路由器 IP地理定位网络空间测绘

DOI：10.19363/J.cnki.cn10-1380/tn.2018.07.02

投稿时间：2018-03-30修订日期：2018-05-30

基金项目:本课题得到国家重点研发计划（No.2016YFB0801303）；东莞市引进创新科研团队计划（No.201636000100038）资助。

Geolocation For Multi-Interface Routers

ZHU Jinyu, ZHANG Yu, ZENG Liangwei, YU Zhuoxun, ZHANG Hongli

(Research Center of Computer Network and Information Security Technology, Department of Computer Science and Technology, Harbin Institute of Technology, Harbin 150001, China)

Abstract:

In the Cyberspace mapping, how to map devices in the virtual topology to geolocations in the real world is a difficult problem. In the past, IP geolocation was mostly based on IP address, rather than routers. In this paper, we utilize two facts that different interfaces on the same router are at the same geolocation, and distances between a router and its neighbors are close. We propose a set of geolocation methods for multi-interface routers, including interface election, neighbor election, IE+NE. The experimental results show that compared with the public dataset, the coverage and accuracy of router geolocation are significantly improved. In terms of coverage rate, the country level reached 99.84%, the city level reached 96.00%, higher than the relevant data set 0.93% and 36.48% respectively; in terms of accuracy rate, the country level reached 82.51%, the city level reached 59.45%, higher than the relevant data set 9.91% and 27.20% respectively.

Key words: Multi-interface router IP geolocation cyberspace mapping