用注意力机制提升细粒度网页指纹攻击,可识别多标签下的子页面。
Attack Smarter: Attention-Driven Fine-Grained Webpage Fingerprinting Attacks
- 基于注意力图对流量关键区域进行增强,提升特征表达
- 在多标签场景下仍保持高精度,跨页面特征重叠问题缓解
- 适合研究隐私泄露或防御机制的学者使用
网站指纹攻击通过分析流量模式推断用户访问的网站,威胁匿名性。现有方法多局限于主页识别,难以应对真实环境中用户快速访问多个子页面的情况。本文提出细粒度网页指纹攻击方法ADWPF,将同一网站的不同子页面视为不同类别。由于页面元素相似,类别间流量特征差异小;且多标签浏览导致流量片段重叠,特征位置不固定,分类难度增加。为此,我们设计注意力驱动策略:训练时依据注意力图对流量显著区域进行裁剪与掩码增强;提取原始与增强流量的低维特征,并引入自注意力模块捕捉全局上下文;针对多标签情况,采用残差注意力生成不同时间位置的页面特异性表示。大量实验表明,ADWPF在不同规模数据集上均优于现有基线方法。
原文摘要 · Abstract (English)
Website Fingerprinting (WF) attacks aim to infer which websites a user is visiting by analyzing traffic patterns, thereby compromising user anonymity. Although this technique has been demonstrated to be effective in controlled experimental environments, it remains largely limited to small-scale scenarios, typically restricted to recognizing website homepages. In practical settings, however, users frequently access multiple subpages in rapid succession, often before previous content fully loads. WebPage Fingerprinting (WPF) generalizes the WF framework to large-scale environments by modeling subpages of the same site as distinct classes. These pages often share similar page elements, resulting in lower inter-class variance in traffic features. Furthermore, we consider multi-tab browsing scenarios, in which a single trace encompasses multiple categories of webpages. This leads to overlapping traffic segments, and similar features may appear in different positions within the traffic, thereby increasing the difficulty of classification. To address these challenges, we propose an attention-driven fine-grained WPF attack, named ADWPF. Specifically, during the training phase, we apply targeted augmentation to salient regions of the traffic based on attention maps, including attention cropping and attention masking. ADWPF then extracts low-dimensional features from both the original and augmented traffic and applies self-attention modules to capture the global contextual patterns of the trace. Finally, to handle the multi-tab scenario, we employ the residual attention to generate class-specific representations of webpages occurring at different temporal positions. Extensive experiments demonstrate that the proposed method consistently surpasses state-of-the-art baselines across datasets of different scales.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。