Multi-flow attack resistant watermarks for network flows

Authors:
Amir Houmansadr;Negar Kiyavash;Nikita Borisov
Affiliations:
Dept. of Electrical and Computer Engineering, UIUC, USA;Dept. of Computer Science, UIUC, USA;Dept. of Electrical and Computer Engineering, UIUC, USA
Venue:
ICASSP '09 Proceedings of the 2009 IEEE International Conference on Acoustics, Speech and Signal Processing
Year:
2009

Citing 0
Cited 6

Fast subspace-based tensor data filtering

ICIP'09 Proceedings of the 16th IEEE international conference on Image processing
On the secrecy of spread-spectrum flow watermarks

ESORICS'10 Proceedings of the 15th European conference on Research in computer security
Exposing invisible timing-based traffic watermarks with BACKLIT

Proceedings of the 27th Annual Computer Security Applications Conference
An interval centroid based spread spectrum watermarking scheme for multi-flow traceback

Journal of Network and Computer Applications
Interval-based flow watermarking for tracing interactive traffic

Computer Networks: The International Journal of Computer and Telecommunications Networking
BotMosaic: Collaborative network watermark for the detection of IRC-based botnets

Journal of Systems and Software

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this work we present a Multi-flow Attack Resistant Interval Centroid Based Watermarking (MAR-ICBW) scheme for network flows. Our proposed scheme can withstand the newly introduced multi-flow watermarking attack that defeats the state-of-the-art interval-based network flow watermarking schemes. Multi-flow attack uses the dependent correlations among the flows marked with the same watermark to recover the secret parameters, and remove the watermark from a flow. The attack can be effective even if different flows are marked with different values of a watermark. MAR-ICBW survives the attack by virtue of randomizing the location of the embedded watermark across multiple flows and therefore, effectively removing the correlations between the flows. While we represent our counter measure to multi-flow attack in terms of an improved version of ICBW, the same methodology can be used to strengthen other interval-based flow watermarking schemes.