Statistics for Website Fingerprinting: Attacks and Defenses