|
|
Geolocation in Internet using network topologies
Dvořák, Filip ; Verner, Lukáš (referee) ; Komosný, Dan (advisor)
The thesis discusses about modern geolocation methods and it describes the basic principles of their work. The work is divided into 2 parts - the theoretical one and the practical one. The first part of the thesis is focused on the description of these methods and on the explanation of its basic concepts which are used for determining of the physical position of the station according to its IP address. The second more extensive part of the work focuses on the description of the realization of algorithm in the Octant method in the programming language of Java and its use in the experimental net of PlanetLab. One important thing is to create a set of reference points and targets, which are necessary for the testing of the whole algorithm of the Octant Method. The results of estimated accuracy of target location obtained by the Octant method and their comparison with the results obtained by active methods of CBG, SOI and with the passive method of GeoIP are listed at the end of this work.
|
|
|
Web application for getting location of IP nodes
Modrák, Zdeněk ; Kubánková, Anna (referee) ; Komosný, Dan (advisor)
Thesis deal with geolocation in internet network. There are described possibilities of geolocation and thesis is mainly focused on passive geolocation methods. Under passive geolocation belongs location databases which there are described as in theoretical way as used in practical part of thesis. In practical part there is created complex system for geolocation in internet environment which used paid and free geolocation databases. Another used database is WHOIS. Data from paid databases is processed and accuracy of databases is evaluated.
|
|
|
Location estimation of Internet nodes
Němeček, Ladislav ; Balej, Jiří (referee) ; Komosný, Dan (advisor)
This paper deals with methods of stations’ IP geolocation. It’s describes the methods of passive and active geolocation and it’s more focused on active searching methods, which usees measuring the latency in network. The factors causing delays in data transfer are discussed first, followed by discussion of the issue of measuring these delays. After that a brief description of PlanetLab experimental network, which nodes were used for delay measurment. Main topic is practical implementation of method Constraint-based Geolocation in Java programming language. Last but not least the measurement results of CBG algorithm are tested.
|
|
|
An accurate comparison of the methods for passive IP Geolocation
Mrázová, Andrea ; Komosný, Dan (referee) ; Verner, Lukáš (advisor)
This thesis aims to evaluate the physical location of the stations connected to the Internet, focusing on passive methods of IP geolocation, specifically by using geolocation databases. The first part is generally described what it is IP geolocation, the second section describes the active and passive methods of IP geolocation and the third section describes the practical parts of assignment and the results that we found.
|
|
|
Application-based Anomalous Communication Detection
Dostál, Michal ; Homoliak, Ivan (referee) ; Očenášek, Pavel (advisor)
This bachelor thesis deals with the analysis, design and implementation of a system for detecting anomalous network communication activities using high-level characteristics. The thesis contains a theoretical basis for the detection of anomalies using countries, autonomous systems and applications that are used to communicate. It also contains information about the techniques and methods of machine learning needed for implementation. The practical part describes the design, use and implementation of individual technologies. The result of this work is detection based on multiple machine learning methods, mostly classification.
|
|
|
Active IP Geolocation for Verification Host Position in Internet
Balej, Jiří ; Róka, Rastislav (referee) ; Zdrálek, Jaroslav (referee) ; Komosný, Dan (advisor)
Dissertation thesis deals with methods for finding the location of the device in the Internet, based on knowledge of the IP address. The process is called IP geolocation and is currently solved by geolocation databases or by measurement of network properties to the IP address. The disadvantage of nowadays geolocation databases is an incorrect information about some locations, because they can be in large distance from correct position. The aim of the thesis is to develop a method for verification of a position from geolocation database using delay measurement. Because of it, there is a detail analysis of influence of partial delays on the distance estimation accuracy, calculated using measured delay between the landmark and the target IP address. For the same reason, long-term delay measurement was performed, where the IP geolocation accuracy was compared using calibration data from previous measurements. On this background, Cable Length Based Geolocalisation (CLBG) method is proposed. Principle of this method is built on the properties of partial delays, which depend on the length of transport media. Firstly, the method measures round trip time (rtt), which is subsequently lowered by intermediate devices and end stations delay. The geographical distance is estimated using signal speed in the transport media. Further, the winding media parameter is established, which is used to determine a constraint around the landmark. The intersection of all constraints defines the area, where the target IP is. The IP geolocation using CLBG gives better results than simpler methods (ShortestPing, GeoPing and SOI), in comparison with more advanced methods (CBG and Octant) the accuracy is similar. The disadvantage of the CLBG method is the size of region, where the target lies, but this is due to its purpose. The position found in geolocation database can be checked by evaluation if it lies in the region.
|
|
|
Current methods for geolocation of Internet hosts
Doležel, Pavel ; Müller, Jakub (referee) ; Balej, Jiří (advisor)
This bachelor work deals with IP geolocation, which means the estimation of geographical location of unknown host in the Internet. The aim of my thesis was to make a delay measurement in PlanetLab Network and then with the use of GeoPing technique estimate the real location of the target. The main part of this work is focused on several different delay-based methods, especially GeoPing which employs „Nearest Neighbor in Delay Space“ algorithm in order to exploit the relationship between network delay and geographic location. Base ground for GeoPing is a database of the machines at known location. This database is composed of 9 probe machines, 260 hosts is used like a landmarks and targets. Estimation of unknown geographical location was done on 60 hosts.
|
|
|
Enrichment of IP Flow Records with Data from External Sources
Zvara, Adam ; Uhříček, Daniel (referee) ; Žádník, Martin (advisor)
This thesis addresses the enhancement of network flows from the viewpoint of a collector, obtained through NetFlow/IPFIX monitoring architecture. The primary objective is to extend the IPFIXcol2 collector with interfaces that can be utilized to develop new modules capable of enriching network flows. The proposed approach involves designing and implementing two modules, namely ASN and GeoIP, to enrich flows with information related to autonomous system numbers and geolocation. After implementing these modules, performance evaluations are conducted to assess their impact on the collector’s overall efficiency.
|
|
|
Application-based Anomalous Communication Detection
Dostál, Michal ; Homoliak, Ivan (referee) ; Očenášek, Pavel (advisor)
This bachelor thesis deals with the analysis, design and implementation of a system for detecting anomalous network communication activities using high-level characteristics. The thesis contains a theoretical basis for the detection of anomalies using countries, autonomous systems and applications that are used to communicate. It also contains information about the techniques and methods of machine learning needed for implementation. The practical part describes the design, use and implementation of individual technologies. The result of this work is detection based on multiple machine learning methods, mostly classification.
|
|
|
Active IP Geolocation for Verification Host Position in Internet
Balej, Jiří ; Róka, Rastislav (referee) ; Zdrálek, Jaroslav (referee) ; Komosný, Dan (advisor)
Dissertation thesis deals with methods for finding the location of the device in the Internet, based on knowledge of the IP address. The process is called IP geolocation and is currently solved by geolocation databases or by measurement of network properties to the IP address. The disadvantage of nowadays geolocation databases is an incorrect information about some locations, because they can be in large distance from correct position. The aim of the thesis is to develop a method for verification of a position from geolocation database using delay measurement. Because of it, there is a detail analysis of influence of partial delays on the distance estimation accuracy, calculated using measured delay between the landmark and the target IP address. For the same reason, long-term delay measurement was performed, where the IP geolocation accuracy was compared using calibration data from previous measurements. On this background, Cable Length Based Geolocalisation (CLBG) method is proposed. Principle of this method is built on the properties of partial delays, which depend on the length of transport media. Firstly, the method measures round trip time (rtt), which is subsequently lowered by intermediate devices and end stations delay. The geographical distance is estimated using signal speed in the transport media. Further, the winding media parameter is established, which is used to determine a constraint around the landmark. The intersection of all constraints defines the area, where the target IP is. The IP geolocation using CLBG gives better results than simpler methods (ShortestPing, GeoPing and SOI), in comparison with more advanced methods (CBG and Octant) the accuracy is similar. The disadvantage of the CLBG method is the size of region, where the target lies, but this is due to its purpose. The position found in geolocation database can be checked by evaluation if it lies in the region.
|
guest ::
