Distributed Agent-based IP Location System Framework Design

Abstract

Computer crime causes significant impact and losses to society and the public security of countries, and even influences homeland security. From previous lessons, we know that the physical location of computer criminals plays an important role in combat with computer crime, including IP Traceback and IP Location. Literature review shows that there have been many studies of the topic of IP Traceback. However, the most critical IP Location has not yet been thoroughly discussed, and existing IP Location approaches, as based on end-to-end delay measurement from a set of landmarks, fail to outperform much simpler techniques, and the error of these approaches is strongly determined by the distance to the nearest landmark, even when triangulation is used to combine estimates from different landmarks. In view of this, this study uses the concept of IP Location and Network Forensics to propose the distributed agent-based IP Location system framework in order that the "position" of the criminal can be traced, and identity can be deduced by this mechanism, when cybercriminal behavior occurs. The result of actual implementation in WiMAX networks shows that the accuracy of IP Location can be the coverage area of a base station (in radius of 150-500 m in urban areas).