Delay Normalization Interference Resistance Packet Order Based Flow Watermarking Technology

Packet timing based flow watermarking technologies can effectively embed watermark information for stepping stone traceback and anonymous abuser correlation by modulating the packet delay characteristics of the target flow to be tracked, which are characterized by strong robustness, wide range of application and free from influence of traffic encryption. However, they are difficult to resist delay normalization interference, which adjusts the inter-packet delays of all packets in the target flow to a fixed value, destroys the watermark carrier on which packet timing based flow watermarking technologies rely, and makes the watermark information in the watermarked flow no longer exist, thus destroying the flow tracking ability of packet timing based flow watermarking technologies. Therefore, delay normalization interference resistance packet order based flow watermarking (DNIR-POFW) technology is proposed, meanwhile, the error-correcting code theory is introduced into the watermark encoding to improve the robustness and anti-interference ability of DNIR-POFW technology. Experimental results show that DNIR-POFW technology not only can effectively resist delay normalization interference, but also has relatively strong robustness to packet reordering generated spontaneously or introduced actively.