A First Look at Generating Website Fingerprinting Attacks via Neural Architecture Search
Loading...
Date
2023-11-26
Authors
Singh, Prabhjot
Arun Naik, Shreya
Malekghaini, Navid
Barradas, Diogo
Limam, Noura
Journal Title
Journal ISSN
Volume Title
Publisher
Workshop on Privacy in the Electronic Society
Abstract
An adversary can use website fingerprinting (WF) attacks to breach the privacy of users who access the web through encrypted tunnels like Tor. These attacks have increasingly relied on the use of deep neural networks (DNNs) to build powerful classifiers that can match the traffic of a target user to the specific traffic pattern of a website.
In this paper, we study whether the use of neural architecture search (NAS) techniques can provide adversaries with a systematic way to find improved DNNs to launch WF attacks. Concretely, we study the performance of the prominent AutoKeras NAS tool on the WF scenario, under a limited exploration budget, and analyze the effectiveness and efficiency of the resulting DNNs.
Our evaluation reveals that AutoKeras's DNNs achieve a comparable accuracy to that of the state-of-the-art Tik-Tok attack on undefended Tor traffic, and obtain 5--8\% accuracy improvements against the FRONT random padding defense, thus highlighting the potential of NAS techniques to enhance the effectiveness of WF.
Description
©Singh, Arun Naik, Malekghaini, Barradas, Limam. 2023. This is the author’s version of the work. It is posted here for your personal use. Not for redistribution. The defnitive version was published in Proceedings of the 21st Workshop on Privacy in the Electronic Society, https://doi.org/10.1145/3603216.3624961.
Keywords
deep learning, neural architecture search, website fingerprinting