Attack Smarter: Attention-Driven Fine-Grained Webpage Fingerprinting Attacks
- URL: http://arxiv.org/abs/2506.20082v1
- Date: Wed, 25 Jun 2025 01:45:55 GMT
- Title: Attack Smarter: Attention-Driven Fine-Grained Webpage Fingerprinting Attacks
- Authors: Yali Yuan, Weiyi Zou, Guang Cheng,
- Abstract summary: Website Fingerprinting (WF) attacks aim to infer which websites a user is visiting by analyzing traffic patterns.<n>WPF generalizes WF to large-scale environments by modeling subpages of the same site as distinct classes.<n>We propose an attention-driven fine-grained WPF attack, named ADWPF.
- Score: 10.525610722239152
- License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
- Abstract: Website Fingerprinting (WF) attacks aim to infer which websites a user is visiting by analyzing traffic patterns, thereby compromising user anonymity. Although this technique has been demonstrated to be effective in controlled experimental environments, it remains largely limited to small-scale scenarios, typically restricted to recognizing website homepages. In practical settings, however, users frequently access multiple subpages in rapid succession, often before previous content fully loads. WebPage Fingerprinting (WPF) generalizes the WF framework to large-scale environments by modeling subpages of the same site as distinct classes. These pages often share similar page elements, resulting in lower inter-class variance in traffic features. Furthermore, we consider multi-tab browsing scenarios, in which a single trace encompasses multiple categories of webpages. This leads to overlapping traffic segments, and similar features may appear in different positions within the traffic, thereby increasing the difficulty of classification. To address these challenges, we propose an attention-driven fine-grained WPF attack, named ADWPF. Specifically, during the training phase, we apply targeted augmentation to salient regions of the traffic based on attention maps, including attention cropping and attention masking. ADWPF then extracts low-dimensional features from both the original and augmented traffic and applies self-attention modules to capture the global contextual patterns of the trace. Finally, to handle the multi-tab scenario, we employ the residual attention to generate class-specific representations of webpages occurring at different temporal positions. Extensive experiments demonstrate that the proposed method consistently surpasses state-of-the-art baselines across datasets of different scales.
Related papers
- TSA-WF: Exploring the Effectiveness of Time Series Analysis for Website Fingerprinting [4.021027132437185]
Website fingerprinting (WF) is a technique that allows an eavesdropper to determine the website a target user is accessing.<n>Recent WF attacks built using machine learning process and summarize trace metadata during their feature extraction phases.<n>We introduce TSA-WF, a pipeline designed to closely preserve network traces' timing and direction characteristics.
arXiv Detail & Related papers (2025-05-20T17:00:31Z) - Towards Robust Multi-tab Website Fingerprinting [31.78904724694232]
Website fingerprinting enables an eavesdropper to determine which websites a user is visiting over an encrypted connection.<n>Existing WF attacks have critical limitations on accurately identifying websites in multi-tab browsing sessions.<n>We propose ARES, a novel WF framework designed for multi-tab WF attacks.
arXiv Detail & Related papers (2025-01-22T04:10:53Z) - MIETT: Multi-Instance Encrypted Traffic Transformer for Encrypted Traffic Classification [59.96233305733875]
Classifying traffic is essential for detecting security threats and optimizing network management.<n>We propose a Multi-Instance Encrypted Traffic Transformer (MIETT) to capture both token-level and packet-level relationships.<n>MIETT achieves results across five datasets, demonstrating its effectiveness in classifying encrypted traffic and understanding complex network behaviors.
arXiv Detail & Related papers (2024-12-19T12:52:53Z) - Towards Fine-Grained Webpage Fingerprinting at Scale [18.201489295361892]
Website Fingerprinting (WF) attacks can effectively identify the websites visited by Tor clients via analyzing encrypted traffic patterns.
Existing attacks focus on identifying different websites, but their accuracy dramatically decreases when applied to identify fine-grained webpages.
We propose Oscar, a WPF attack based on multi-label metric learning that identifies different webpages from obfuscated traffic by transforming the feature space.
arXiv Detail & Related papers (2024-09-06T15:21:00Z) - Seamless Website Fingerprinting in Multiple Environments [4.226243782049956]
Website fingerprinting (WF) attacks identify the websites visited over anonymized connections.
We introduce a new approach that classifies entire websites rather than individual web pages.
Our Convolutional Neural Network (CNN) uses only the jitter and size of 500 contiguous packets from any point in a TCP stream.
arXiv Detail & Related papers (2024-07-28T02:18:30Z) - Beyond Mask: Rethinking Guidance Types in Few-shot Segmentation [67.35274834837064]
We develop a universal vision-language framework (UniFSS) to integrate prompts from text, mask, box, and image.
UniFSS significantly outperforms the state-of-the-art methods.
arXiv Detail & Related papers (2024-07-16T08:41:01Z) - Generalizable Person Search on Open-world User-Generated Video Content [93.72028298712118]
Person search is a challenging task that involves retrieving individuals from a large set of un-cropped scene images.
Existing person search applications are mostly trained and deployed in the same-origin scenarios.
We propose a generalizable framework on both feature-level and data-level generalization to facilitate downstream tasks in arbitrary scenarios.
arXiv Detail & Related papers (2023-10-16T04:59:50Z) - Multi-spectral Class Center Network for Face Manipulation Detection and Localization [52.569170436393165]
We propose a novel Multi-Spectral Class Center Network (MSCCNet) for face manipulation detection and localization.
Based on the features of different frequency bands, the MSCC module collects multi-spectral class centers and computes pixel-to-class relations.
Applying multi-spectral class-level representations suppresses the semantic information of the visual concepts which is insensitive to manipulated regions of forgery images.
arXiv Detail & Related papers (2023-05-18T08:09:20Z) - Multi-view Multi-label Anomaly Network Traffic Classification based on
MLP-Mixer Neural Network [55.21501819988941]
Existing network traffic classification based on convolutional neural networks (CNNs) often emphasizes local patterns of traffic data while ignoring global information associations.
We propose an end-to-end network traffic classification method.
arXiv Detail & Related papers (2022-10-30T01:52:05Z) - An F-shape Click Model for Information Retrieval on Multi-block Mobile
Pages [39.63441649184412]
We develop a novel F-shape Click Model to model user behaviors on multi-block mobile pages.
We conduct a user eye-tracking study, and identify users' sequential browsing, block skip and comparison patterns on F-shape pages.
Experiments on a large-scale real-world dataset validate the effectiveness of FSCM on user behavior predictions.
arXiv Detail & Related papers (2022-06-17T07:59:46Z) - Beyond the Prototype: Divide-and-conquer Proxies for Few-shot
Segmentation [63.910211095033596]
Few-shot segmentation aims to segment unseen-class objects given only a handful of densely labeled samples.
We propose a simple yet versatile framework in the spirit of divide-and-conquer.
Our proposed approach, named divide-and-conquer proxies (DCP), allows for the development of appropriate and reliable information.
arXiv Detail & Related papers (2022-04-21T06:21:14Z) - Learning Spatio-Appearance Memory Network for High-Performance Visual
Tracking [79.80401607146987]
Existing object tracking usually learns a bounding-box based template to match visual targets across frames, which cannot accurately learn a pixel-wise representation.
This paper presents a novel segmentation-based tracking architecture, which is equipped with a local-temporal memory network to learn accurate-temporal correspondence.
arXiv Detail & Related papers (2020-09-21T08:12:02Z)
This list is automatically generated from the titles and abstracts of the papers in this site.
This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.