On the Secrecy of Timing-Based Active Watermarking Trace-Back Techniques

On the Secrecy of Timing-Based Active Watermarking Trace-Back Techniques

Cached

Download Links

[discovery.csc.ncsu.edu]
[discovery.csc.ncsu.edu]

Other Repositories/Bibliography

DBLP

by Pai Peng Peng

Citations:

17 - 2 self

Versions

Version History

Metadata Version 1

User correction supplied by SystemCorrections

Datum	Value	Source
TITLE	On the Secrecy of Timing-Based Active Watermarking Trace-Back Techniques	user correction - Legacy Corrections
AUTHOR NAME	Pai Peng Peng	user correction - Legacy Corrections
ABSTRACT	Timing-based active watermarking schemes are developed to trace back attackers through stepping stone connections or anonymizing networks. By slightly changing packet timing, these schemes achieve robust correlation for encrypted network connections under timing perturbation. However, the manipulation on packet timing makes the schemes themselves a potential target of intelligent attackers. In this paper, we analyze the secrecy of the timingbased active watermarking techniques for tracing through stepping stones, and propose an attack scheme based on analyzing the packet delays between adjacent stepping stones. We develop attack techniques to infer important watermark parameters, and to recover and duplicate embedded watermarks. The resulting techniques enable an attacker to defeat the tracing systems in certain cases by removing watermarks from the stepping stone connections, or replicating watermarks in non-stepping stone connections. We also develop techniques to determine in real-time whether a stepping stone connection is being watermarked for trace-back purposes. We have performed substantial experiments using real-world data to evaluate these techniques. The experimental results demonstrate that for the watermark scheme being attacked (1) embedded watermarks can be successfully recovered and duplicated when the watermark parameters are not chosen carefully, and (2) the existence of watermarks in a network flow can always be quickly detected. 1.	user correction - Legacy Corrections
CITATIONS	34 found	ParsCit 1.0