The Community for Technology Leaders
Green Image
Issue No. 02 - March-April (2017 vol. 14)
ISSN: 1545-5971
pp: 130-144
AbdelRahman Abdou , Department of Systems and Computer EngineeringCarleton University
Ashraf Matrawy , School of Information Technology, Carleton University
P. C. van Oorschot , School of Computer Science, Carleton University
ABSTRACT
The number of location-aware services over the Internet continues growing. Some of these require the client’s geographic location for security-sensitive applications. Examples include location-aware authentication, location-aware access policies, fraud prevention, complying with media licensing, and regulating online gambling/voting. An adversary can evade existing geolocation techniques, e.g., by faking GPS coordinates or employing a non-local IP address through proxy and virtual private networks. We devise Client Presence Verification (CPV), a delay-based verification technique designed to verify an assertion about a device’s presence inside a prescribed geographic region. CPV does not identify devices by their IP addresses. Rather, the device’s location is corroborated in a novel way by leveraging geometric properties of triangles, which prevents an adversary from manipulating measured delays. To achieve high accuracy, CPV mitigates Internet path asymmetry using a novel method to deduce one-way application-layer delays to/from the client’s participating device, and mines these delays for evidence supporting/refuting the asserted location. We evaluate CPV through detailed experiments on PlanetLab, exploring various factors that affect its efficacy, including the granularity of the verified location, and the verification time. Results highlight the potential of CPV for practical adoption.
INDEX TERMS
Delays, Internet, Protocols, Geology, Synchronization, IP networks, Accuracy
CITATION

A. Abdou, A. Matrawy and P. C. van Oorschot, "CPV: Delay-Based Location Verification for the Internet," in IEEE Transactions on Dependable and Secure Computing, vol. 14, no. 2, pp. 130-144, 2017.
doi:10.1109/TDSC.2015.2451614
224 ms
(Ver 3.3 (11022016))