# Framework for Malware Triggering Using Steganography
## 4 Evaluation
### Results and Analysis
#### 4.2.1 Geolocation Services Result and Analysis
\begin{table}
\begin{tabular}{c c c c} \hline
**IP** & **Coordinates** & **Other Information** & **Analysis (Meters)** \\ \hline DB-IP & “latitude”: 24.47136 & “city”: “Riyadh” & \\  & “longitude”: 46.6753 & “region”: “Riyadh & Accuracy: 722,882.94761 \\  & “longitude”: 46.6753 & “country”: “Saudi Arabia” & \\ \hline Maxmind GeolP2 & “latitude”: 21.5168 & “city”: “Jeddah” & Precision Radius: \\  & “longitude”: 39.2192 & “region”: “Mecca Region & 200 km = 200,000 m \\  & “country”: “Saudi Arabia, Asia” & Accuracy: 327,802.7072 \\ \hline IP2 Location & “latitude”: 21.51694 & “city”: “Jeddah” & \\  & “longitude”: 39.21917 & “region”: “Makkah al Mukarramah” & Accuracy: 327,787.51195 \\  & “country”: “Saudi Arabia” & \\ \hline Ipinfo & “latitude”: 21.2703 & “city”: “Ta if” & \\  & “longitude”: 40.4158 & “region”: “Mecca Region” & Accuracy: 365,083.7281 \\  & “country”: “SA” & \\ \hline Skyhook Hyperlocal IP & “latitude”: 21.5168 & – & Precision:694,224.0 \\  & “longitude”: 39.841141 & – & Accuracy: 327,786.44829 \\ \hline Google Geolocation API & “latitude”: 24.4678656 & – & Precision:9490.098963240705 \\  & “longitude”: 39.5804672 & – & Accuracy: 5349.6971342 \\ \hline Ipregistry & “latitude”: 21.51675 & “city”: “Jeddah” & \\  & “longitude”: 39.21913 & “region”: “Makkah al Mukarramah” & Accuracy: 327,808.9383 \\  & “longitude”: 39.21913 & “country”: “Saudi Arabia” & \\ \hline  & & “city”: “Riyadh” & \\  & “latitude”: 24.68773 & “region”: “Riyadh Region” & Accuracy: 727,549.79284 \\  & “longitude”: 46.72185 & “country”: “SA” & \\ \hline \end{tabular}
\end{table} 
Table 11: Database-based IP geolocation by a wireless network (STC_4G). \begin{table}
\begin{tabular}{c c c c} \hline
**IP** & **Coordinates** & **Other Information** & **Analysis (Meters)** \\ \hline DB-IP & “latitude”: 24.4926 & “city”: “Sulénah” & \\  & “longitude”: 39.5857 & “region”: “Medina Region” & Accuracy: 7218.9267536 \\  & “longitude”: 39.5857 & “country”: “Saudi Arabia” & \\ \hline Maxmind GeolP2 & “latitude”: 24.4662 & “city”: “Medina” & Precision Radius: \\  & “longitude”: 39.6168 & “region”: “Medina Region” & 200 km = 200,000 m \\  & “country”: “Saudi Arabia, Asia” & Accuracy: 8849.2794528 \\ \hline IP2 Location & “latitude”: 24.46861 & “region”: “Al Madinah al Munawawarah” & Accuracy: 8645.0363188 \\  & “longitude”: 39.61417 & “Munawwarah” & \\  & “country”: “Saudi Arabia” & \\ \hline Ipinfo & “latitude”: 24.4686 & “city”: “Medina Region” & Accuracy: 8647.7410092 \\  & “longitude”: 39.6142 & “region”: “Medina Region” & Accuracy: 8647.7410092 \\  & “country”: “SA” & \\ \hline Skyhook Hyperlocal IP & “latitude”: 26.45756 & – & Precision: 0.0 \\  & “longitude”: 38.058708 & – & Accuracy: 267,627.79054 \\ \hline Google Geolocation API & “latitude”: 24.4714834 & – & Precision: 1207.4218113793675 \\  & “longitude”: 39.5329976 & – & Accuracy: 2293.1773689 \\ \hline  & & “city””: “Medina” & \\ Ipregistry & “latitude”: 24.46625 & “region”: “Al Madinah al Munawwarah” & Accuracy: 8851.3385909 \\  & “longitude”: 39.61681 & “country”: “Saudi Arabia” & \\  & & “country”: “Saudi Arabia” & \\ \hline \end{tabular}
\end{table} 
Table 12: Database-based IP geolocation by a wireless network (DSL). According to the findings, the databases achieved perfect accuracy at the country level. However, for Skyhook Hyperlocal IP and Google Geolocation API, only the coordinates were returned, not the city, country, or region. Table 11 shows the results of locating the device using an IP geolocation database when the device is connected to a SIM card wireless network. The findings show that the majority of databases produced incorrect results at the region and city levels. The worst accuracy, which was around 700 km (kilometers), was achieved by the DBIP and Whois databases. The best database was Google, with an accuracy of 5 km. The rest of the databases returned almost all locations within an accuracy range greater than 300 km. Table 12 below shows the results of locating the device using an IP geolocation database when the device is connected to a DSL wireless network.