arXiv:2606.17462cs.LGcs.NI2026-06被引 2

通过资源级知识蒸馏,提升网页指纹攻击在真实环境中的鲁棒性。

ResAware: Cross-Environment Website Fingerprinting via Resource-Privileged Distillation

论文配图:ResAware: Cross-Environment Website Fingerprinting via Resource-Privileged Distillation
图 1 · 摘自论文原文
  • 用资源级特征训练教师模型,蒸馏知识给仅依赖加密流量的学生模型。
  • 在150天时间漂移下,F1分数提升至81.49%,开世界识别率提高至27.20%。
  • 适合研究网络隐私攻击与防御、需跨环境部署的模型开发者。

尽管网页指纹(WF)攻击在受控实验室环境中表现优异,但在真实场景中常因时空漂移、浏览器差异和代理混淆等因素导致性能大幅下降。其根源在于仅依赖对环境扰动敏感的低层流量特征。为此,我们提出ResAware:一种在训练丰富/推理贫瘠的非对称设置下,基于资源特权蒸馏的跨环境框架。ResAware在资源级特征上训练教师模型,并通过异构知识蒸馏将优势知识传递给学生模型。部署时,学生模型仅使用加密流量进行推理,无额外开销。我们在五个全球分布观测点持续五个月收集的大规模数据集上评估,包含超过16万对样本。结果表明,ResAware显著增强多种WF基线的跨环境鲁棒性。例如,在150天时间漂移下,Var-CNN的F1分数从72.77%提升至81.49%,开世界TPR@1%FPR从22.40%升至27.20%。结果证明,资源级监督可提升抗干扰能力,无需扩展在线观测能力。

原文摘要 · Abstract (English)

While Website Fingerprinting (WF) attacks achieve high accuracy in controlled laboratory settings, they often degrade substantially in real-world environments due to spatio-temporal drift, browser heterogeneity, proxy obfuscation and etc. This limitation stems from their sole reliance on low-level traffic features that are noisy and highly sensitive to environmental perturbations. To address this problem, we propose \textbf{ResAware}, a cross-environment resource-aware distillation framework under a \textit{training-rich/inference-poor} asymmetric setting. Specifically, ResAware trains a teacher model on resource-level features, and then distills the resulting privileged knowledge into a student model through heterogeneous knowledge distillation. At deployment time, the student model performs inference using only encrypted traffic, incurring zero additional cost. We evaluate ResAware on a large-scale dataset collected over five months from six globally distributed vantage points, comprising more than $160{,}000$ paired samples. The results show that ResAware significantly enhances the cross-environment robustness of diverse WF baselines. Under a 150-day temporal drift, for example, ResAware improves the F1-score of Var-CNN from $72.77\%$ to $81.49\%$ and the open-world $TPR@1\%FPR$ from $22.40\%$ to $27.20\%$. Our results demonstrate that resource-level supervision improves WF robustness without expanding online observation capabilities.

网页指纹知识蒸馏隐私攻击鲁棒性

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。