Over the past few years, deep-learning based approaches for Tor website fingerprinting have experienced a significant breakthrough in prediction accuracy. However, many of these approaches suppose that their training and testing datasets share similar distributions, i.e. they belong to the same domain. Unfortunately, this assumption is unrealistic since Tor users’ distinctive environmental settings have exerted diverse influence on website trace generation. Although several recent methods attempt to address this problem by utilizing transfer learning techniques, they assume that the adversary has some of the trace labels for each website class in the testing dataset, which is typically irrational in real-world scenarios. In this paper, we propose a novel Tor website fingerprinting framework called Unsupervised and Adaptive Tor Website Fingerprinting (UAF), which minimizes the distribution discrepancies between the training (denoted as the source domain) and testing (denoted as the target domain) datasets by training a “domain-invariant” feature extractor in an unsupervised manner. UAF employs three trace representations on raw Tor traffic to retain discriminative information for classification and combines multiple source-specific classifiers based on their trace length distributions. The experimental results show that UAF outperforms multiple state-of-the-art Tor website fingerprinting approaches in identifying shifted and unlabeled target domains.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Unsupervised and Adaptive Tor Website Fingerprinting

  • Guoqiang Zhang,
  • Jiahao Cao,
  • Mingwei Xu,
  • Xinhao Deng

摘要

Over the past few years, deep-learning based approaches for Tor website fingerprinting have experienced a significant breakthrough in prediction accuracy. However, many of these approaches suppose that their training and testing datasets share similar distributions, i.e. they belong to the same domain. Unfortunately, this assumption is unrealistic since Tor users’ distinctive environmental settings have exerted diverse influence on website trace generation. Although several recent methods attempt to address this problem by utilizing transfer learning techniques, they assume that the adversary has some of the trace labels for each website class in the testing dataset, which is typically irrational in real-world scenarios. In this paper, we propose a novel Tor website fingerprinting framework called Unsupervised and Adaptive Tor Website Fingerprinting (UAF), which minimizes the distribution discrepancies between the training (denoted as the source domain) and testing (denoted as the target domain) datasets by training a “domain-invariant” feature extractor in an unsupervised manner. UAF employs three trace representations on raw Tor traffic to retain discriminative information for classification and combines multiple source-specific classifiers based on their trace length distributions. The experimental results show that UAF outperforms multiple state-of-the-art Tor website fingerprinting approaches in identifying shifted and unlabeled target domains.