A Watermarking-Based Host Correlation Detection Scheme

A watermarking-based host correlation detection method is proposedin this paper. The idea is to embed some unique watermark into theflow by slightly adjusting the timing of selected packets in theflow. In the embedding phase, we use network flow groupingstrategy to divide the IPDs (i.e., inter-packet delay) into twodifferent groups randomly, and then realize the watermarkembedding by utilizing the relationship of the average value ofIPDs in different groups. The detection scheme we proposed notonly has the advantage of the timing-based scheme, but also has ahigher robustness against timing perturbation attack.