IP-Pealing:A Robust Network Flow Watermarking Method Based on IP Packet Sequence  

作　　者：Wangxin FENG Xiangyang LUO Tengyao LI Chunfang YANG 

机构地区：[1]State Key Laboratory of Mathematical Engineering and Advanced Computing,Zhengzhou 450001,China [2]Key Laboratory of Cyberspace Situation Awareness of Henan Province,Zhengzhou 450001,China

出　　处：《Chinese Journal of Electronics》2024年第3期694-707,共14页电子学报（英文版）

基　　金：supported by the National Key Research and Development Program of China (Grant No.2022YFB3102904);the National Natural Science Foundation of China (Grant Nos.62172435,U1804263,and 61872448);the Zhongyuan Science and Technology Innovation Leading Talent Project of China (Grant No.214200510019);the Henan Province Key Research,Development and Promotion Project on Tackling Key Scientific Problems (Grant No.222102210018);the Key Research and Development Project of Henan Province (Grant No.221111321200)。

摘　　要：Network flow watermarking(NFW)is usually used for flow correlation.By actively modulating some features of the carrier traffic,NFW can establish the correspondence between different network nodes.In the face of strict demands of network traffic tracing,current watermarking methods cannot work efficiently due to the dependence on specific protocols,demand for large quantities of packets,weakness on resisting network channel interferences and so on.To this end,we propose a robust network flow watermarking method based on IP packet sequence,called as IP-Pealing.It is designed to utilize the packet sequence as watermark carrier with IP identification field which is insensitive to time jitter and suitable for all IP based traffic.To enhance the robustness against packet loss and packet reordering,the detection sequence set is constructed in terms of the variation range of packet sequence,correcting the possible errors caused by the network transmission.To improve the detection accuracy,the long watermark information is divided into several short sequences to embed in turn and assembled during detection.By a large number of experiments on the Internet,the overall detection rate and accuracy of IP-Pealing reach 99.91%and 99.42%respectively.In comparison with the classical network flow watermarking methods,such as PROFW,IBW,ICBW,WBIPD and SBTT,the accuracy of IP-Pealing is increased by 13.70%to 54.00%.

关 键 词：Network flow watermarking IP packet sequence Detection sequence set Fast detection ROBUSTNESS 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]