Patent ID: 8433796
Filing Date: 2013-04-30
Classification: H04L

Abstract:
1. A device, comprising one or more processors to join a botnet by generating a watermarked packet flow by causing a watermark to be injected into an outgoing packet flow in response to commands from a botmaster, the watermark comprising a multitude of watermark bits, the watermark applied to the outgoing packet flow by: a) choosing at least two distinct packets from the outgoing packet flow; b) forming at least one packet pair from the at least two distinct packets, each of the at least one packet pair including a reference packet and an encoding packet; c) encoding each of at least one of the multitude of watermark bits to a different one of the at least one packet pair by increasing the length of the encoding packet when each of the multitude of watermark bits has a predetermined value; d) placing: e) wherein: