Evidential value of country location evidence obtained from IP address geolocation

Kód výsledku v IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216305%3A26220%2F23%3APU147860" target="_blank" >RIV/00216305:26220/23:PU147860 - isvavai.cz</a>

Výsledek na webu

<a href="https://peerj.com/articles/cs-1305/" target="_blank" >https://peerj.com/articles/cs-1305/</a>

DOI - Digital Object Identifier

<a href="http://dx.doi.org/10.7717/peerj-cs.1305" target="_blank" >10.7717/peerj-cs.1305</a>

Jazyk výsledku

angličtina

Název v původním jazyce

Evidential value of country location evidence obtained from IP address geolocation

Popis výsledku v původním jazyce

Knowledge of the previous location of an Internet device is valuable information in forensics. The previous device location can be obtained via the IP address that the device used to access Internet services, such as email, banking, and online shopping. However, the problem with the device location using its IP address is the unknown evidential value, which is used to admit the evidence in the case. This work introduces a method to process free and constantly updated data to assess the evidential value of the IP country location. The evidential value is assessed for several countries by analyzing historical data over 8 years. Tampering with the location evidence is discussed, as well as its detection. The source code to replicate the results and to apply the updated data to future evidence is available.

Název v anglickém jazyce

Evidential value of country location evidence obtained from IP address geolocation

Popis výsledku anglicky

Knowledge of the previous location of an Internet device is valuable information in forensics. The previous device location can be obtained via the IP address that the device used to access Internet services, such as email, banking, and online shopping. However, the problem with the device location using its IP address is the unknown evidential value, which is used to admit the evidence in the case. This work introduces a method to process free and constantly updated data to assess the evidential value of the IP country location. The evidential value is assessed for several countries by analyzing historical data over 8 years. Tampering with the location evidence is discussed, as well as its detection. The source code to replicate the results and to apply the updated data to future evidence is available.

Druh

J_imp - Článek v periodiku v databázi Web of Science

CEP obor

—

OECD FORD obor

20202 - Communication engineering and systems

Projekt

—

Návaznosti

S - Specificky vyzkum na vysokych skolach

Rok uplatnění

2023

Kód důvěrnosti údajů

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Název periodika

PeerJ Computer Science

ISSN

2376-5992

e-ISSN

—

Svazek periodika

9

Číslo periodika v rámci svazku

neuvedeno

Stát vydavatele periodika

GB - Spojené království Velké Británie a Severního Irska

Počet stran výsledku

20

Strana od-do

1-20

Kód UT WoS článku

000996366700001

EID výsledku v databázi Scopus

2-s2.0-85153936123