<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-05253993</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-15T15:11:42+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">GeoFINDR: Practical Approach to Verify Cloud Instances Geolocation in Multicloud</title>
            <author role="aut">
              <persName>
                <forename type="first">Said</forename>
                <surname>Ider</surname>
              </persName>
              <idno type="halauthorid">3769742-0</idno>
              <affiliation ref="#struct-95600"/>
              <affiliation ref="#struct-563936"/>
              <affiliation ref="#struct-352124"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Maryline</forename>
                <surname>Laurent</surname>
              </persName>
              <email type="md5">3f94e7e4bdf252b091bafb32bb4a1e88</email>
              <email type="domain">telecom-sudparis.eu</email>
              <idno type="idhal" notation="string">maryline-laurent</idno>
              <idno type="idhal" notation="numeric">175376</idno>
              <idno type="halauthorid" notation="string">29000-175376</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-7256-3721</idno>
              <idno type="IDREF">https://www.idref.fr/079483658</idno>
              <affiliation ref="#struct-1101446"/>
              <affiliation ref="#struct-563936"/>
              <affiliation ref="#struct-95600"/>
              <affiliation ref="#struct-1076412"/>
              <affiliation ref="#struct-352124"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>maryline</forename>
                <surname>laurent</surname>
              </persName>
              <email type="md5">3f94e7e4bdf252b091bafb32bb4a1e88</email>
              <email type="domain">telecom-sudparis.eu</email>
            </editor>
            <funder ref="#projanr-109992"/>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2025-09-15 10:50:23</date>
              <date type="whenModified">2026-02-07 05:32:12</date>
              <date type="whenReleased">2025-10-16 15:34:46</date>
              <date type="whenProduced">2025-09-15</date>
              <date type="whenEndEmbargoed">2025-09-15</date>
              <ref type="file" target="https://hal.science/hal-05253993v1/document">
                <date notBefore="2025-09-15"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-05253993v1/file/2504.18685v1-2.pdf" id="file-5255419-4555267">
                <date notBefore="2025-09-15"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="526648">
                <persName>
                  <forename>maryline</forename>
                  <surname>laurent</surname>
                </persName>
                <email type="md5">3f94e7e4bdf252b091bafb32bb4a1e88</email>
                <email type="domain">telecom-sudparis.eu</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-05253993</idno>
            <idno type="halUri">https://hal.science/hal-05253993</idno>
            <idno type="halBibtex">ider:hal-05253993</idno>
            <idno type="halRefHtml">2025</idno>
            <idno type="halRef">2025</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-5255419-4555267"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="TELECOM-SUDPARIS" corresp="INSTITUT-MINES-TELECOM">Télécom SudParis</idno>
            <idno type="stamp" n="IP_PARIS">Institut Polytechnique de Paris</idno>
            <idno type="stamp" n="INSTITUTS-TELECOM">composantes instituts telecom </idno>
            <idno type="stamp" n="ANR">ANR</idno>
            <idno type="stamp" n="INSTITUT-MINES-TELECOM">Institut Mines Telecom</idno>
            <idno type="stamp" n="IP-PARIS-DEPARTEMENT-MATHEMATIQUES">Département de Mathèmatiques</idno>
            <idno type="stamp" n="IP-PARIS-MATHEMATIQUES">IP Paris Département de Mathématiques</idno>
            <idno type="stamp" n="IP-PARIS-INFORMATION-COMMUNICATION-ELECTRONIQUE">IP Paris Département d'Information, de Communication et d'Électronique</idno>
            <idno type="stamp" n="IP-PARIS-INFORMATIQUE-DONNEES-ET-IA">IP Paris Département d'Informatique, de Données et d'IA</idno>
            <idno type="stamp" n="TRUSTINCLOUDS">Projet "TRUSTINCloudS" du PEPR Cloud </idno>
            <idno type="stamp" n="SAMOVAR">Services répartis, Architectures, Modélisation, Validation, Administration des Réseaux</idno>
          </seriesStmt>
          <notesStmt/>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">GeoFINDR: Practical Approach to Verify Cloud Instances Geolocation in Multicloud</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Said</forename>
                    <surname>Ider</surname>
                  </persName>
                  <idno type="halauthorid">3769742-0</idno>
                  <affiliation ref="#struct-95600"/>
                  <affiliation ref="#struct-563936"/>
                  <affiliation ref="#struct-352124"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Maryline</forename>
                    <surname>Laurent</surname>
                  </persName>
                  <email type="md5">3f94e7e4bdf252b091bafb32bb4a1e88</email>
                  <email type="domain">telecom-sudparis.eu</email>
                  <idno type="idhal" notation="string">maryline-laurent</idno>
                  <idno type="idhal" notation="numeric">175376</idno>
                  <idno type="halauthorid" notation="string">29000-175376</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-7256-3721</idno>
                  <idno type="IDREF">https://www.idref.fr/079483658</idno>
                  <affiliation ref="#struct-1101446"/>
                  <affiliation ref="#struct-563936"/>
                  <affiliation ref="#struct-95600"/>
                  <affiliation ref="#struct-1076412"/>
                  <affiliation ref="#struct-352124"/>
                </author>
              </analytic>
              <monogr>
                <imprint>
                  <date type="datePub">2025</date>
                </imprint>
              </monogr>
              <idno type="doi">10.48550/arXiv.2504.18685</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">VM-scale localization</term>
                <term xml:lang="en">dishonest cloud service providers</term>
                <term xml:lang="en">RIPE Atlas</term>
                <term xml:lang="en">GeoFINDR</term>
                <term xml:lang="en">multicloud</term>
                <term xml:lang="en">Delay-based geolocation</term>
                <term xml:lang="en">FOS: Computer and information sciences</term>
                <term xml:lang="en">Networking and Internet Architecture (cs.NI)</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-ni">Computer Science [cs]/Networking and Internet Architecture [cs.NI]</classCode>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halTypology" n="UNDEFINED">Preprints, Working Papers, ...</classCode>
              <classCode scheme="halOldTypology" n="UNDEFINED">Preprints, Working Papers, ...</classCode>
              <classCode scheme="halTreeTypology" n="UNDEFINED">Preprints, Working Papers, ...</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>In multicloud environments, where legal obligations, technical constraints and economic interests are at stake, it is of interest to stakeholders to be able to locate cloud data or the cloud instance where data are decrypted for processing, making it particularly vulnerable. This paper proposes an original and practical delay-based approach, called GeoFINDR, to locate a cloud instance, e.g. a Virtual Machine (VM), over the Internet, based on RIPE Atlas landmarks. First, the assumed threat model and assumptions are more realistic than in existing solutions, e.g. VM-scale localization in multicloud environments, a Cloud Service Provider (CSP) lying about the VM's location. Second, the originality of the approach lies in four original ideas: (1) geolocalization is performed from the VM, (2) a Greedy algorithm selects a first set LM_A of distributed audit landmarks in the vicinity of the declared area, (3) a sectorization algorithm identifies a set LM_S of other landmarks with distance delay behavior similar to that of the VM to estimate the sector of the VM, and (4) the estimated location of the VM is calculated as the barycenter position of the LM_S landmarks. An open source tool is published on GitHub and experiments show that localization accuracy can be as high as 22.1km, under unfavorable conditions where the CSP lies about the location of the VM.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="department" xml:id="struct-95600" status="VALID">
          <orgName>Département Réseaux et Services de Télécommunications</orgName>
          <orgName type="acronym">TSP - RST</orgName>
          <desc>
            <address>
              <addrLine>Télécom SudParis - 9 rue Charles Fourier - 91011 Évry cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://rst.telecom-sudparis.eu/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-352124" type="direct"/>
            <relation active="#struct-302102" type="indirect"/>
            <relation name="563936" active="#struct-563936" type="indirect"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-563936" status="VALID">
          <idno type="IdRef">238327159</idno>
          <idno type="ISNI">0000000502717600</idno>
          <idno type="ROR">https://ror.org/042tfbd02</idno>
          <idno type="Wikidata">Q48759778</idno>
          <orgName>Institut Polytechnique de Paris</orgName>
          <orgName type="acronym">IP Paris</orgName>
          <date type="start">2019-06-02</date>
          <desc>
            <address>
              <addrLine>Route de Saclay, 91120 Palaiseau Cedex, France</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.ip-paris.fr</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-352124" status="VALID">
          <idno type="IdRef">162347510</idno>
          <idno type="ISNI">0000000406406351</idno>
          <idno type="ROR">https://ror.org/05xvk4r52</idno>
          <idno type="Wikidata">Q43305</idno>
          <orgName>Télécom SudParis</orgName>
          <orgName type="acronym">TSP</orgName>
          <desc>
            <address>
              <addrLine>9 rue Charles Fourier -91011 Evry Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.telecom-sudparis.eu/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-302102" type="direct"/>
            <relation name="563936" active="#struct-563936" type="direct"/>
          </listRelation>
        </org>
        <org type="researchteam" xml:id="struct-1101446" status="VALID">
          <orgName>Sécurité et Confiance Numérique</orgName>
          <orgName type="acronym">SCN-SAMOVAR</orgName>
          <date type="start">2022-06-01</date>
          <desc>
            <address>
              <addrLine>Télécom Sudparis, 9 rue Charles Fourier -91011 Evry-Courcouronnes cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://samovar.telecom-sudparis.eu/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-638" type="direct"/>
            <relation active="#struct-352124" type="indirect"/>
            <relation active="#struct-302102" type="indirect"/>
            <relation name="563936" active="#struct-563936" type="indirect"/>
          </listRelation>
        </org>
        <org type="researchteam" xml:id="struct-1076412" status="VALID">
          <orgName>Chaire Valeurs Politiques des Informations Personnelles</orgName>
          <orgName type="acronym">CVPIP</orgName>
          <desc>
            <address>
              <addrLine>9, rue Charles Fourier - 91011 Evry Courcouronnes cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.imt-bs.eu/recherche/valeurs-et-politiques-des-informations-personnelles/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-352124" type="direct"/>
            <relation active="#struct-302102" type="indirect"/>
            <relation name="563936" active="#struct-563936" type="indirect"/>
            <relation active="#struct-542824" type="direct"/>
            <relation active="#struct-1048346" type="direct"/>
            <relation active="#struct-563936" type="indirect"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-302102" status="VALID">
          <idno type="IdRef">192427156</idno>
          <idno type="ISNI">000000012202567X</idno>
          <idno type="ROR">https://ror.org/025vp2923</idno>
          <idno type="Wikidata">Q27962533</idno>
          <orgName>Institut Mines-Télécom [Paris]</orgName>
          <orgName type="acronym">IMT</orgName>
          <date type="start">2012-03-01</date>
          <desc>
            <address>
              <addrLine>19 Place Marguerite Perey, 91120 Palaiseau</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.imt.fr/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-638" status="VALID">
          <idno type="IdRef">281286515</idno>
          <idno type="ISNI">0000000403830480</idno>
          <idno type="RNSR">200319330C</idno>
          <orgName>Services répartis, Architectures, MOdélisation, Validation, Administration des Réseaux</orgName>
          <orgName type="acronym">SAMOVAR</orgName>
          <desc>
            <address>
              <addrLine>Télécom Sudparis, 9 rue Charles Fourier -91011 Evry cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://samovar.telecom-sudparis.eu/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-352124" type="direct"/>
            <relation active="#struct-302102" type="indirect"/>
            <relation name="563936" active="#struct-563936" type="indirect"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-542824" status="VALID">
          <orgName>Institut Mines-Télécom Business School</orgName>
          <orgName type="acronym">IMT-BS</orgName>
          <date type="start">2018-05-23</date>
          <desc>
            <address>
              <addrLine>9, rue Charles Fourier91011 Evry Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.imt-bs.eu/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-302102" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-1048346" status="VALID">
          <idno type="IdRef">026375273</idno>
          <idno type="ISNI">0000 0001 2108 2779</idno>
          <idno type="ROR">https://ror.org/01naq7912</idno>
          <orgName>Télécom Paris</orgName>
          <date type="start">2019-06-12</date>
          <desc>
            <address>
              <addrLine>19 Place Marguerite Perey 91120 Palaiseau</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.telecom-paris.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-302102" type="direct"/>
            <relation active="#struct-563936" type="direct"/>
          </listRelation>
        </org>
      </listOrg>
      <listOrg type="projects">
        <org type="anrProject" xml:id="projanr-109992" status="VALID">
          <idno type="anr">ANR-23-PECL-0009</idno>
          <orgName>TRUSTINClouds</orgName>
          <desc>Sécurité des infrastructures Cloud</desc>
          <date type="start">2023</date>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>