Few-shot Website Fingerprinting attack with Meta-Bias Learning

作者:

Highlights:

• We investigate the under-studied, more realistic, and more challenging few-shot website fingerprinting attackproblem. Crucially, we focus on the model learning scalability for knowledge transfer efficacy, and model optimization strategy for task adaptation capability.

• We propose a novel Meta-Bias Learning (MBL) method for solving few-shot WF attack. Specifically, we introduce a notion of parameter factorization, which avoids the need of meta-training the whole model. With this design, a majority fraction of parameters can be allocated to learn generic re-usable feature representations useful for all different tasks, whilst the remaining are used for more effective task adaptation.

• Extensive experiments show that our MBL outperforms significantly previous state-of-the-art methods in both closed-world and open-world few-shot WF attack scenarios, with and without defense.

摘要

•We investigate the under-studied, more realistic, and more challenging few-shot website fingerprinting attackproblem. Crucially, we focus on the model learning scalability for knowledge transfer efficacy, and model optimization strategy for task adaptation capability.•We propose a novel Meta-Bias Learning (MBL) method for solving few-shot WF attack. Specifically, we introduce a notion of parameter factorization, which avoids the need of meta-training the whole model. With this design, a majority fraction of parameters can be allocated to learn generic re-usable feature representations useful for all different tasks, whilst the remaining are used for more effective task adaptation.•Extensive experiments show that our MBL outperforms significantly previous state-of-the-art methods in both closed-world and open-world few-shot WF attack scenarios, with and without defense.

论文关键词:User privacy,Internet anonymity,Data traffic,Website fingerprinting,Deep learning,Neural network,Few-shot learning,Meta-learning,Parameter factorization

论文评审过程:Received 6 March 2021, Revised 11 February 2022, Accepted 23 April 2022, Available online 30 April 2022, Version of Record 23 May 2022.

论文官网地址:https://doi.org/10.1016/j.patcog.2022.108739