Despite the ability of the anonymous communication system The Onion Router(Tor)to obscure the content of communications,prior studies have shown that passive adversaries can still infer the websites visited by users t...Despite the ability of the anonymous communication system The Onion Router(Tor)to obscure the content of communications,prior studies have shown that passive adversaries can still infer the websites visited by users throughwebsite fingerprinting(WF)attacks.ConventionalWFmethodologies demonstrate optimal performance in scenarios involving single-tab browsing.Conventional WF methods achieve optimal performance primarily in scenarios involving single-tab browsing.However,in real-world network environments,users often engage in multitab browsing,which generates overlapping traffic patterns from different websites.This overlap has been shown to significantly degrade the performance of classifiers that rely on the single-tab assumption.To address this challenge,this paper proposes a Transformer-basedmulti-tab website fingerprinting(MT-WF)attack framework.Themodel employs an adaptive sliding windowmechanism to capture fine-grained features of traffic direction.Additionally,it incorporates a label-aware attention mechanism designed to dynamically separate and refine entangled traffic representations,enhancing the model’s ability to distinguish between overlapping traffic patterns.Furthermore,the model leverages global traffic patterns through multi-segment feature fusion and incorporates an incremental learning(IL)strategy to adapt to the continuously evolving website categories in open-world environments.Experimental results demonstrate that the proposedmethod achieves a top-2 precision of 0.78 in the closed-world setting.In the open-world scenario,the model attains an F1 score of 0.904,outperforming most existing baselines.The proposed method maintains superior performance even under challenging conditions,including WF defenses and concept drift.展开更多
文摘Despite the ability of the anonymous communication system The Onion Router(Tor)to obscure the content of communications,prior studies have shown that passive adversaries can still infer the websites visited by users throughwebsite fingerprinting(WF)attacks.ConventionalWFmethodologies demonstrate optimal performance in scenarios involving single-tab browsing.Conventional WF methods achieve optimal performance primarily in scenarios involving single-tab browsing.However,in real-world network environments,users often engage in multitab browsing,which generates overlapping traffic patterns from different websites.This overlap has been shown to significantly degrade the performance of classifiers that rely on the single-tab assumption.To address this challenge,this paper proposes a Transformer-basedmulti-tab website fingerprinting(MT-WF)attack framework.Themodel employs an adaptive sliding windowmechanism to capture fine-grained features of traffic direction.Additionally,it incorporates a label-aware attention mechanism designed to dynamically separate and refine entangled traffic representations,enhancing the model’s ability to distinguish between overlapping traffic patterns.Furthermore,the model leverages global traffic patterns through multi-segment feature fusion and incorporates an incremental learning(IL)strategy to adapt to the continuously evolving website categories in open-world environments.Experimental results demonstrate that the proposedmethod achieves a top-2 precision of 0.78 in the closed-world setting.In the open-world scenario,the model attains an F1 score of 0.904,outperforming most existing baselines.The proposed method maintains superior performance even under challenging conditions,including WF defenses and concept drift.
