Initial offset randomization based multi-flow attack resistance method

摘要

Multi-flow attack based on inter-flow dependency relationship can constitute a serious threat to packet timing based flow watermarking technologies. Embedding position randomization method can resist multi-flow attack, but it leads to a higher false positive rate. This paper proposed initial offset randomization based multi-flow attack resistance (IOR-MFAR) method, which adopts different random seeds to randomly choose initial offsets for different target network flows to eliminate dependency relationship between watermarked flows. Analysis and empirical evaluation results show that the IOR-MFAR method can effectively defend against multi-flow attack, at the same time, compared with the embedding position randomization method, it doesn't increase the false positive rate of original flow watermarking technology.