{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T12:07:50Z","timestamp":1779365270897,"version":"3.53.0"},"reference-count":35,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Computer Networks"],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1016\/j.comnet.2026.112340","type":"journal-article","created":{"date-parts":[[2026,4,28]],"date-time":"2026-04-28T07:08:36Z","timestamp":1777360116000},"page":"112340","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["CSSW: A robust Centroid-Sequential Synergetic Flow Watermarking framework for tracking network attacks"],"prefix":"10.1016","volume":"284","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-8685-483X","authenticated-orcid":false,"given":"Ning","family":"Yang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5705-1218","authenticated-orcid":false,"given":"Shanchen","family":"Pang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-0682-4826","authenticated-orcid":false,"given":"Shutao","family":"Guo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.comnet.2026.112340_b1","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2019.112845","article-title":"Adaptive intrusion detection via GA-GOGMM-based pattern learning with fuzzy rough set-based attribute selection","volume":"139","author":"Liu","year":"2020","journal-title":"Expert Syst. Appl."},{"issue":"3","key":"10.1016\/j.comnet.2026.112340_b2","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3182658","article-title":"A survey on routing in anonymous communication protocols","volume":"51","author":"Shirazi","year":"2018","journal-title":"ACM Comput. Surv."},{"issue":"1","key":"10.1016\/j.comnet.2026.112340_b3","article-title":"Survey on botnet detection techniques: Classification, methods, and evaluation","volume":"2021","author":"Xing","year":"2021","journal-title":"Math. Probl. Eng."},{"issue":"1","key":"10.1016\/j.comnet.2026.112340_b4","doi-asserted-by":"crossref","first-page":"512","DOI":"10.1109\/COMST.2016.2604405","article-title":"Network flow watermarking: A survey","volume":"19","author":"Iacovazzi","year":"2016","journal-title":"IEEE Commun. Surv. Tutor"},{"issue":"4","key":"10.1016\/j.comnet.2026.112340_b5","doi-asserted-by":"crossref","first-page":"567","DOI":"10.1109\/TPDS.2008.132","article-title":"Flexible deterministic packet marking: An IP traceback system to find the real source of attacks","volume":"20","author":"Xiang","year":"2009","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"10.1016\/j.comnet.2026.112340_b6","series-title":"2017 International Conference on Computing Methodologies and Communication","first-page":"566","article-title":"Network security enhancement through effective log analysis using ELK","author":"Al-Mahbashi","year":"2017"},{"key":"10.1016\/j.comnet.2026.112340_b7","first-page":"103","article-title":"A novel honeypot based security approach for real-time intrusion detection and prevention systems","volume":"41","author":"Baykara","year":"2018","journal-title":"J. Inf. Secur. Appl."},{"issue":"5","key":"10.1016\/j.comnet.2026.112340_b8","doi-asserted-by":"crossref","first-page":"1125","DOI":"10.1007\/s10207-023-00682-2","article-title":"A systematic literature review for network intrusion detection system (IDS)","volume":"22","author":"Abdulganiyu","year":"2023","journal-title":"Int. J. Inf. Secur."},{"key":"10.1016\/j.comnet.2026.112340_b9","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2025.104653","article-title":"Advances in network flow watermarking: A survey","volume":"159","author":"Qiao","year":"2025","journal-title":"Comput. Secur."},{"key":"10.1016\/j.comnet.2026.112340_b10","first-page":"1","article-title":"RLDJ-W: A reinforcement learning-driven joint watermarking framework for privacy leakage detection in digital healthcare systems","author":"Qiao","year":"2025","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.comnet.2026.112340_b11","first-page":"1","article-title":"SIBW: A swarm intelligence-based network flow watermarking approach for privacy leakage detection in digital healthcare systems","author":"Qiao","year":"2025","journal-title":"IEEE J. Biomed. Health Inform."},{"key":"10.1016\/j.comnet.2026.112340_b12","doi-asserted-by":"crossref","DOI":"10.1109\/TCE.2025.3576357","article-title":"FedSSH: A consumer-oriented federated semi-supervised heterogeneous IoMT framework","author":"Qiao","year":"2025","journal-title":"IEEE Trans. Consum. Electron."},{"issue":"12","key":"10.1016\/j.comnet.2026.112340_b13","doi-asserted-by":"crossref","first-page":"2411","DOI":"10.1109\/TC.2012.169","article-title":"Novel packet size-based covert channel attacks against anonymizer","volume":"62","author":"Ling","year":"2012","journal-title":"IEEE Trans. Comput."},{"issue":"4","key":"10.1016\/j.comnet.2026.112340_b14","doi-asserted-by":"crossref","first-page":"38","DOI":"10.1109\/MMUL.2017.4031314","article-title":"Flow watermarking for antinoise and multistream tracing in anonymous networks","volume":"24","author":"Wang","year":"2017","journal-title":"IEEE MultiMedia"},{"key":"10.1016\/j.comnet.2026.112340_b15","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2025.104355","article-title":"DeMarking: A defense for network flow watermarking in real-time","volume":"152","author":"Yuan","year":"2025","journal-title":"Comput. Secur."},{"key":"10.1016\/j.comnet.2026.112340_b16","doi-asserted-by":"crossref","DOI":"10.1109\/LSP.2025.3591070","article-title":"AIBW: Average interval-based watermarking for tracking down network attacks","author":"Ma","year":"2025","journal-title":"IEEE Signal Process. Lett."},{"key":"10.1016\/j.comnet.2026.112340_b17","series-title":"2007 IEEE Symposium on Security and Privacy","first-page":"18","article-title":"DSSS-based flow marking technique for invisible traceback","author":"Yu","year":"2007"},{"key":"10.1016\/j.comnet.2026.112340_b18","series-title":"IEEE INFOCOM 2019-IEEE Conference on Computer Communications","first-page":"1180","article-title":"Novel and practical SDN-based traceback technique for malicious traffic over anonymous networks","author":"Ling","year":"2019"},{"key":"10.1016\/j.comnet.2026.112340_b19","first-page":"1","article-title":"FRW-TRACE: Forensic-ready watermarking framework for tamper-resistant biometric data and attack traceability in consumer electronics","author":"Qiao","year":"2025","journal-title":"IEEE Trans. Consum. Electron."},{"key":"10.1016\/j.comnet.2026.112340_b20","series-title":"Trusted Information: The New Decade Challenge 16","first-page":"369","article-title":"Sleepy watermark tracing: An active network-based intrusion response framework","author":"Wang","year":"2001"},{"key":"10.1016\/j.comnet.2026.112340_b21","series-title":"Recent Advances in Intrusion Detection: 11th International Symposium, RAID 2008, Cambridge, MA, USA, September 15-17, 2008. Proceedings 11","first-page":"59","article-title":"A first step towards live botmaster traceback","author":"Ramsbrock","year":"2008"},{"key":"10.1016\/j.comnet.2026.112340_b22","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2025.104571","article-title":"DynMark: A dynamic packet counting watermarking scheme for robust traffic tracing in network flows","volume":"157","author":"Qiao","year":"2025","journal-title":"Comput. Secur."},{"issue":"5","key":"10.1016\/j.comnet.2026.112340_b23","doi-asserted-by":"crossref","first-page":"1139","DOI":"10.1109\/TIFS.2017.2779113","article-title":"DropWat: An invisible network flow watermark for data exfiltration traceback","volume":"13","author":"Iacovazzi","year":"2017","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.comnet.2026.112340_b24","series-title":"IEEE INFOCOM 2018-IEEE Conference on Computer Communications","first-page":"747","article-title":"Inflow: Inverse network flow watermarking for detecting hidden servers","author":"Iacovazzi","year":"2018"},{"key":"10.1016\/j.comnet.2026.112340_b25","doi-asserted-by":"crossref","first-page":"66","DOI":"10.1016\/j.comcom.2022.09.028","article-title":"Sliding window based ON\/OFF flow watermarking on tor","volume":"196","author":"Yang","year":"2022","journal-title":"Comput. Commun."},{"key":"10.1016\/j.comnet.2026.112340_b26","series-title":"ICC 2019-2019 IEEE International Conference on Communications","first-page":"1","article-title":"An invisible flow watermarking for traffic tracking: A hidden Markov model approach","author":"Yao","year":"2019"},{"key":"10.1016\/j.comnet.2026.112340_b27","series-title":"2021 17th International Conference on Mobility, Sensing and Networking","first-page":"746","article-title":"The design and implementation of an efficient quaternary network flow watermark technology","author":"Mo","year":"2021"},{"issue":"1","key":"10.1016\/j.comnet.2026.112340_b28","doi-asserted-by":"crossref","first-page":"21111","DOI":"10.1038\/s41598-023-48552-0","article-title":"An efficient hexadecimal network flow watermark method for tracking attack traffic","volume":"13","author":"Cui","year":"2023","journal-title":"Sci. Rep."},{"issue":"zk2","key":"10.1016\/j.comnet.2026.112340_b29","first-page":"17","article-title":"Flow watermarking scheme based on packet reordering","volume":"22","author":"Zhang","year":"2012","journal-title":"J. Softw."},{"issue":"3","key":"10.1016\/j.comnet.2026.112340_b30","doi-asserted-by":"crossref","first-page":"694","DOI":"10.23919\/cje.2022.00.366","article-title":"Ip-pealing: a robust network flow watermarking method based on ip packet sequence","volume":"33","author":"Feng","year":"2024","journal-title":"Chin. J. Electron."},{"key":"10.1016\/j.comnet.2026.112340_b31","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.103701","article-title":"HSTW: A robust network flow watermarking method based on hybrid packet sequence-timing","volume":"139","author":"Feng","year":"2024","journal-title":"Comput. Secur."},{"key":"10.1016\/j.comnet.2026.112340_b32","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2022.109424","article-title":"HeteroTiC: A robust network flow watermarking based on heterogeneous time channels","volume":"219","author":"Li","year":"2022","journal-title":"Comput. Netw."},{"issue":"2","key":"10.1016\/j.comnet.2026.112340_b33","doi-asserted-by":"crossref","first-page":"976","DOI":"10.1021\/acs.jcim.5c02747","article-title":"DNACSE: Enhancing genomic llms with contrastive learning for dna barcode identification","volume":"66","author":"Wang","year":"2026","journal-title":"J. Chem. Inf. Model."},{"key":"10.1016\/j.comnet.2026.112340_b34","article-title":"An end-to-end DNA storage coding method based on a low-complexity multiple biological constraints loss and RL-inspired differentiable solver","author":"Liu","year":"2026","journal-title":"Expert Syst. Appl."},{"key":"10.1016\/j.comnet.2026.112340_b35","series-title":"The 2010 14th International Conference on Computer Supported Cooperative Work in Design","first-page":"146","article-title":"A double interval centroid-based watermark for network flow traceback","author":"Wang","year":"2010"}],"container-title":["Computer Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S138912862600352X?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S138912862600352X?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T11:34:28Z","timestamp":1779363268000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S138912862600352X"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":35,"alternative-id":["S138912862600352X"],"URL":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112340","relation":{},"ISSN":["1389-1286"],"issn-type":[{"value":"1389-1286","type":"print"}],"subject":[],"published":{"date-parts":[[2026,7]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"CSSW: A robust Centroid-Sequential Synergetic Flow Watermarking framework for tracking network attacks","name":"articletitle","label":"Article Title"},{"value":"Computer Networks","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112340","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"112340"}}