arXiv:2409.04341cs.CRcs.AI2024-09被引 21

通过特征空间转换,精准识别加密流量中的细粒度网页。

Towards Fine-Grained Webpage Fingerprinting at Scale

  • 采用多标签度量学习提取网页细微差异特征。
  • 在1000个监控网页上实现88.6%的召回率提升。
  • 适合研究隐私泄露与流量分析对抗的学者。

网站指纹攻击(WF)可通过分析加密流量模式有效识别Tor客户端访问的网站。现有方法主要针对不同网站的识别,但在区分同一网站下的细粒度子页面时准确率显著下降。网页指纹攻击(WPF)面临流量模式高度相似和网页规模庞大两大挑战,且用户常同时访问多个页面,增加了从混淆流量中提取各页面特征的难度。本文提出Oscar,一种基于多标签度量学习的WPF攻击方法,通过变换特征空间识别加密流量中的不同网页,可捕捉即使流量模式相似的网页间的细微差异。Oscar结合代理式与样本式度量学习损失,从混淆流量中提取网页特征并实现多网页识别。我们实现了Oscar原型,并在真实世界中对1,000个监控网页及超过9,000个未监控网页的流量进行了评估。结果表明,Oscar在多标签度量的Recall@5上相较现有最佳攻击提升了88.6%。

原文摘要 · Abstract (English)

Website Fingerprinting (WF) attacks can effectively identify the websites visited by Tor clients via analyzing encrypted traffic patterns. Existing attacks focus on identifying different websites, but their accuracy dramatically decreases when applied to identify fine-grained webpages, especially when distinguishing among different subpages of the same website. WebPage Fingerprinting (WPF) attacks face the challenges of highly similar traffic patterns and a much larger scale of webpages. Furthermore, clients often visit multiple webpages concurrently, increasing the difficulty of extracting the traffic patterns of each webpage from the obfuscated traffic. In this paper, we propose Oscar, a WPF attack based on multi-label metric learning that identifies different webpages from obfuscated traffic by transforming the feature space. Oscar can extract the subtle differences among various webpages, even those with similar traffic patterns. In particular, Oscar combines proxy-based and sample-based metric learning losses to extract webpage features from obfuscated traffic and identify multiple webpages. We prototype Oscar and evaluate its performance using traffic collected from 1,000 monitored webpages and over 9,000 unmonitored webpages in the real world. Oscar demonstrates an 88.6% improvement in the multi-label metric Recall@5 compared to the state-of-the-art attacks.

网页指纹隐私安全度量学习加密流量

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。