Deep Fingerprinting: Undermining Website Fingerprinting Defenses with Deep Learning
By Payap Sirinam, Mohsen Imani, Marc Juárez, Matthew K. Wright. Conference on Computer and Communications Security, 2018
680 citations recorded by the source corpus.
Website fingerprinting enables a local eavesdropper to determine which websites a user is visiting over an encrypted connection. State-of-the-art website fingerprinting attacks have been shown to be effective even against Tor. Recently, lightweight website fingerprinting defenses for Tor have been proposed that substantially degrade existing attacks: WTF-PAD and Walkie-Talkie. In this work, we present Deep Fingerprinting (DF), a new website fingerprinting attack against Tor that leverages a type of deep learning called Convolutional Neural Networks (CNN) with a sophisticated architecture design, and we evaluate this attack against WTF-PAD and Walkie-Talkie. The DF attack attains over 98% accuracy on Tor traffic without defenses, better than all prior attacks, and it is also the only attack that is effective against WTF-PAD with over 90% accuracy. Walkie-Talkie remains effective, holding the attack to just 49.7% accuracy. In the more realistic open-world setting, our attack remains effective, with 0.99 precision and 0.94 recall on undefended traffic. Against traffic defended with WTF-PAD in this setting, the attack still can get 0.96 precision and 0.68 recall. These findings highlight the need for effective defenses that protect against this new attack and that could be deployed in Tor.
Subfields: Artificial Intelligence
View Paper: https://www.semanticscholar.org/paper/3136a798a0bf31e6e924eb2f78a90f71d089ca4a
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
In Artificial Intelligence
- Xiaojiang Du
- Ke Xu
- Meng Shen
- Liehuang Zhu
- Domenico Ciuonzo
- Antonio Pescapè
- Antonio Montieri
- Giuseppe Aceto
Citations in the corpus
- Mobile Encrypted Traffic Classification Using Deep Learning: Experimental Evaluation, Lessons Learned, and Challenges (2019, background): “[34] develop a WF attack against Tor which is evaluated against state-of-the-art defenses (i.”
- Accurate Decentralized Application Identification via Encrypted Traffic Analysis Using Graph Neural Networks (2021, background): “been proposed for website fingerprinting [18], [26], mobile”
- Large Language Model (LLM) for Telecommunications: A Comprehensive Survey on Principles, Key Techniques, and Opportunities (2024, methodology): “BERT-BiLSTM is evaluated to identify the types of network communication application activities using the ISCX VPN dataset [152], which includes various pcap files corresponding to different application activities.”