Packet-Level Open-World App Fingerprinting on Wireless Traffic
Jianfeng Li,Shuohan Wu,Hao Zhou,Xiapu Luo,Ting Wang,Yangyang Liu,Xiaobo Ma
DOI: https://doi.org/10.14722/ndss.2022.24210
2022-01-01
Abstract:Mobile apps have profoundly reshaped modern lifestyles in different aspects.Several concerns are naturally raised about the privacy risk of mobile apps.Despite the prevalence of encrypted communication, app fingerprinting (AF) attacks still pose a serious threat to users' online privacy.However, existing AF attacks are usually hampered by four challenging issues, namely i) hidden destination, ii) invisible boundary, iii) app multiplexing, and iv) open-world recognition, when they are applied to wireless traffic.None of existing AF attacks can address all these challenges.In this paper, we advance a novel AF attack, dubbed PACKETPRINT, to recognize user activities associated with the app of interest from encrypted wireless traffic and tackle the above challenges by proposing two novel models, i.e., sequential XGBoost and hierarchical bag-ofwords model.We conduct extensive experiments to evaluate the proposed attack in a series of challenging scenarios, including i) open-world setting, ii) packet loss and network congestion, iii) simultaneous use of different apps, and iv) cross-dataset recognition.The experimental results show that PACKETPRINT can accurately recognize user activities associated with the apps of interest.It achieves the average F1-score 0.884 for open-world app recognition and the average F1-score 0.959 for in-app user action recognition. I. INTRODUCTIONMobile devices, such as smartphones and tablets, are ubiquitous in modern life.A myriad of mobile apps empower them with the capabilities that profoundly reshape people's lifestyle, ranging from information retrieval to instant messaging, and from shopping to entertainment.The recent prevalence of online to offline apps, e.g., food delivery, further signalizes this trend by bridging the gap between the online information and physical businesses [1], [2].Every coin has a flip side.Mobile apps offer users highquality services, accompanied by the collection, transmission, storage, and even sharing of user data, raising serious privacy concerns.For example, compromising apps' cloud servers may cause disastrous privacy leakage [3]- [5].Such attacks are basically due to software flaws.While threatening, these flaws are scarce and, once found, will be immediately fixed to avoid severe consequences.Data transmission channel can be