Abstract:While the anonymous communication system Tor can protect user privacy, website fingerprinting (WF) attackers can still identify the websites that users access over encrypted network connections by analyzing the metadata generated during network communication. Despite the emergence of new WF attack techniques in recent years, most research in this area has focused on pure traffic traces generated from single-tab browsing behavior. However, multi-tab browsing behavior significantly degrades the performance of WF classification models based on the single-tab assumption. As a result, some research has shifted its focus to multi-tab WF attacks, although most of these works have limited utilization of the mixed information contained in multi-tab traces. In this paper, we propose an end-to-end multi-tab WF attack model, called Transformer-based model for Multi-tab Website Fingerprinting attack (TMWF). Inspired by object detection algorithms in computer vision, we treat multi-tab WF recognition as a problem of predicting ordered sets with a maximum length. By adding enough single-tab queries to the detection model and letting each query extract WF features from different positions in the multi-tab traces, our model's Transformer architecture capitalizes more fully on trace features. Paired with our new proposed model training approach, we accomplish adaptive recognition of multi-tab traces with varying numbers of web pages. This approach successfully eliminates a strong and unrealistic assumption in the field of multi-tab WF attacks - that the number of tabs contained in a sample belongs to the attacker's prior knowledge. Experimental results in various scenarios demonstrate that the performance of TMWF is significantly better than existing multi-tab WF attack models. To evaluate model performance in more authentic scenarios, we present a dataset of multi-tab trace data collected from real open-world environments.

Relation-CNN: Enhancing website fingerprinting attack with relation features and NFS-CNN

Efficient Fine-Grained Website Fingerprinting Via Encrypted Traffic Analysis with Deep Learning

Seamless Website Fingerprinting in Multiple Environments

Neural-FacTOR: Neural Representation Learning for Website Fingerprinting Attack over TOR Anonymity

snWF: Website Fingerprinting Attack by Ensembling the Snapshot of Deep Learning

Var-CNN: A Data-Efficient Website Fingerprinting Attack Based on Deep Learning

SubvertingWebsite Fingerprinting Defenses with Robust Traffic Representation

Res-DFNN: an NN-Based Device Fingerprint Extraction Method Using Network Packet Data

A Cascade Face Spoofing Detector Based on Face Anti-Spoofing R-CNN and Improved Retinex LBP

WF3A: A N-shot Website Fingerprinting with Effective Fusion Feature Attention

HSWF: Enhancing website fingerprinting attacks on tor to address real world distribution mismatch

Realistic Website Fingerprinting By Augmenting Network Trace

Resisting DNN-Based Website Fingerprinting Attacks Enhanced by Adversarial Training

TFAN: A Task-adaptive Feature Alignment Network for few-shot website fingerprinting attacks on Tor

Robust Multi-tab Website Fingerprinting Attacks in the Wild.

Joint Alignment Networks For Few-Shot Website Fingerprinting Attack

Resource Knowledge-Driven Heterogeneous Graph Learning for Website Fingerprinting

Deep Fingerprinting: Undermining Website Fingerprinting Defenses with Deep Learning

Exploring Uncharted Waters of Website Fingerprinting

Transformer-based Model for Multi-tab Website Fingerprinting Attack

An Automated Multi-Tab Website Fingerprinting Attack