
Research Article
CacheLoc: Leveraging CDN Edge Servers for User Geolocation
@INPROCEEDINGS{10.1007/978-3-030-63095-9_2, author={Mingkui Wei and Khaled Rabieh and Faisal Kaleem}, title={CacheLoc: Leveraging CDN Edge Servers for User Geolocation}, proceedings={Security and Privacy in Communication Networks. 16th EAI International Conference, SecureComm 2020, Washington, DC, USA, October 21-23, 2020, Proceedings, Part II}, proceedings_a={SECURECOMM PART 2}, year={2020}, month={12}, keywords={Content delivery networks User geolocation}, doi={10.1007/978-3-030-63095-9_2} }
- Mingkui Wei
Khaled Rabieh
Faisal Kaleem
Year: 2020
CacheLoc: Leveraging CDN Edge Servers for User Geolocation
SECURECOMM PART 2
Springer
DOI: 10.1007/978-3-030-63095-9_2
Abstract
In nowadays’ Internet, websites rely more and more on obtaining users’ geolocation to provide customized services. However, besides Internet giants such as Google, who retains a large amount of detailed user information, most websites still rely on IP addresses for user geolocation, which is proven inaccurate and misleading by existing studies. In this paper, we propose a novel approach, namelyCacheLoc, for coarse-grained user geolocation leveraging widely-deployed content delivery networks (CDNs). This work is motivated by the fact that CDN providers deploy a number of edge servers that are geographically distributed across the world. Many of these edge servers are assigned with unique identifiers that are tied to their location, which can be easily retrieved by inspecting HTTP responses headers served by these edge servers. As a result, a website can infer coarse-grained user location by asking a user to send an HTTP request to an arbitrary domain that is known being served by a CDN, and inspecting the corresponding responses. To evaluate the usability and accuracy of the cache-based user geolocation, we conducted practical experiments based on a commercial VPN with over 160 endpoints distributed in 94 countries. Our experiments demonstrate that cache-based geolocation can achieve at least accurate country-level granularity in the regions where CDN edge servers are densely deployed. Our work sheds light on a novel light-weight and self-contained user geolocation solution.