Detail publikace

Evidential value of country location evidence obtained from IP address geolocation

KOMOSNÝ, D.

Originální název

Evidential value of country location evidence obtained from IP address geolocation

Typ

článek v časopise ve Web of Science, Jimp

Jazyk

angličtina

Originální abstrakt

Knowledge of the previous location of an Internet device is valuable information in forensics. The previous device location can be obtained via the IP address that the device used to access Internet services, such as email, banking, and online shopping. However, the problem with the device location using its IP address is the unknown evidential value, which is used to admit the evidence in the case. This work introduces a method to process free and constantly updated data to assess the evidential value of the IP country location. The evidential value is assessed for several countries by analyzing historical data over 8 years. Tampering with the location evidence is discussed, as well as its detection. The source code to replicate the results and to apply the updated data to future evidence is available.

Klíčová slova

Internet, IP address, Service, Location, Country, Evidence, Forensics

Autoři

KOMOSNÝ, D.

Vydáno

30. 3. 2023

Nakladatel

PeerJ

Místo

GB

ISSN

2376-5992

Periodikum

PeerJ Computer Science

Ročník

9

Číslo

neuvedeno

Stát

Spojené království Velké Británie a Severního Irska

Strany od

1

Strany do

20

Strany počet

20

URL

https://peerj.com/articles/cs-1305/

Plný text v Digitální knihovně

http://hdl.handle.net/11012/209277

BibTex

@article{BUT183084,
  author="Dan {Komosný}",
  title="Evidential value of country location evidence obtained from IP address geolocation",
  journal="PeerJ Computer Science",
  year="2023",
  volume="9",
  number="neuvedeno",
  pages="1--20",
  doi="10.7717/peerj-cs.1305",
  issn="2376-5992",
  url="https://peerj.com/articles/cs-1305/"
}