Evidential value of country location evidence obtained from IP address geolocation
The result's identifiers
Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216305%3A26220%2F23%3APU147860" target="_blank" >RIV/00216305:26220/23:PU147860 - isvavai.cz</a>
Result on the web
<a href="https://peerj.com/articles/cs-1305/" target="_blank" >https://peerj.com/articles/cs-1305/</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.7717/peerj-cs.1305" target="_blank" >10.7717/peerj-cs.1305</a>
Alternative languages
Result language
angličtina
Original language name
Evidential value of country location evidence obtained from IP address geolocation
Original language description
Knowledge of the previous location of an Internet device is valuable information in forensics. The previous device location can be obtained via the IP address that the device used to access Internet services, such as email, banking, and online shopping. However, the problem with the device location using its IP address is the unknown evidential value, which is used to admit the evidence in the case. This work introduces a method to process free and constantly updated data to assess the evidential value of the IP country location. The evidential value is assessed for several countries by analyzing historical data over 8 years. Tampering with the location evidence is discussed, as well as its detection. The source code to replicate the results and to apply the updated data to future evidence is available.
Czech name
—
Czech description
—
Classification
Type
J<sub>imp</sub> - Article in a specialist periodical, which is included in the Web of Science database
CEP classification
—
OECD FORD branch
20202 - Communication engineering and systems
Result continuities
Project
—
Continuities
S - Specificky vyzkum na vysokych skolach
Others
Publication year
2023
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů
Data specific for result type
Name of the periodical
PeerJ Computer Science
ISSN
2376-5992
e-ISSN
—
Volume of the periodical
9
Issue of the periodical within the volume
neuvedeno
Country of publishing house
GB - UNITED KINGDOM
Number of pages
20
Pages from-to
1-20
UT code for WoS article
000996366700001
EID of the result in the Scopus database
2-s2.0-85153936123