{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,4]],"date-time":"2026-02-04T16:37:04Z","timestamp":1770223024749,"version":"3.49.0"},"reference-count":56,"publisher":"Wiley","license":[{"start":{"date-parts":[[2021,9,15]],"date-time":"2021-09-15T00:00:00Z","timestamp":1631664000000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100004735","name":"Natural Science Foundation of Hunan Province","doi-asserted-by":"publisher","award":["2021JJ40682"],"award-info":[{"award-number":["2021JJ40682"]}],"id":[{"id":"10.13039\/501100004735","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004735","name":"Natural Science Foundation of Hunan Province","doi-asserted-by":"publisher","award":["2018YFB0204301"],"award-info":[{"award-number":["2018YFB0204301"]}],"id":[{"id":"10.13039\/501100004735","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004735","name":"Natural Science Foundation of Hunan Province","doi-asserted-by":"publisher","award":["61472439"],"award-info":[{"award-number":["61472439"]}],"id":[{"id":"10.13039\/501100004735","id-type":"DOI","asserted-by":"publisher"}]},{"name":"National Key Research and Development Program of China","award":["2021JJ40682"],"award-info":[{"award-number":["2021JJ40682"]}]},{"name":"National Key Research and Development Program of China","award":["2018YFB0204301"],"award-info":[{"award-number":["2018YFB0204301"]}]},{"name":"National Key Research and Development Program of China","award":["61472439"],"award-info":[{"award-number":["61472439"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2021JJ40682"],"award-info":[{"award-number":["2021JJ40682"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2018YFB0204301"],"award-info":[{"award-number":["2018YFB0204301"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61472439"],"award-info":[{"award-number":["61472439"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Security and Communication Networks"],"published-print":{"date-parts":[[2021,9,15]]},"abstract":"<jats:p>This work introduces a novel data augmentation method for few-shot website fingerprinting (WF) attack where only a handful of training samples per website are available for deep learning model optimization. Moving beyond earlier WF methods relying on manually-engineered feature representations, more advanced deep learning alternatives demonstrate that learning feature representations automatically from training data is superior. Nonetheless, this advantage is subject to an unrealistic assumption that there exist many training samples per website, which otherwise will disappear. To address this, we introduce a model-agnostic, efficient, and harmonious data augmentation (HDA) method that can improve deep WF attacking methods significantly. HDA involves both intrasample and intersample data transformations that can be used in a harmonious manner to expand a tiny training dataset to an arbitrarily large collection, therefore effectively and explicitly addressing the intrinsic data scarcity problem. We conducted expensive experiments to validate our HDA for boosting state-of-the-art deep learning WF attack models in both closed-world and open-world attacking scenarios, at absence and presence of strong defense. For instance, in the more challenging and realistic evaluation scenario with WTF-PAD-based defense, our HDA method surpasses the previous state-of-the-art results by nearly 3% in classification accuracy in the 20-shot learning case. An earlier version of this work Chen et al. (2021) has been presented as preprint in ArXiv (https:\/\/arxiv.org\/abs\/2101.10063).<\/jats:p>","DOI":"10.1155\/2021\/2840289","type":"journal-article","created":{"date-parts":[[2021,9,16]],"date-time":"2021-09-16T21:35:43Z","timestamp":1631828143000},"page":"1-13","source":"Crossref","is-referenced-by-count":19,"title":["Few-Shot Website Fingerprinting Attack with Data Augmentation"],"prefix":"10.1155","volume":"2021","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1300-2104","authenticated-orcid":true,"given":"Mantun","family":"Chen","sequence":"first","affiliation":[{"name":"College of Computer, National University of Defense Technology, Changsha 410073, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3257-539X","authenticated-orcid":true,"given":"Yongjun","family":"Wang","sequence":"additional","affiliation":[{"name":"College of Computer, National University of Defense Technology, Changsha 410073, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8448-6815","authenticated-orcid":true,"given":"Zhiquan","family":"Qin","sequence":"additional","affiliation":[{"name":"College of Computer, National University of Defense Technology, Changsha 410073, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9284-2955","authenticated-orcid":true,"given":"Xiatian","family":"Zhu","sequence":"additional","affiliation":[{"name":"University of Surrey, Stag Hill, University Campus, Guildford GU2 7XH, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"311","reference":[{"key":"1","article-title":"Few-shot website fingerprinting attack","author":"M. Chen","year":"2021"},{"key":"2","first-page":"303","article-title":"Tor: the second-generation onion router","author":"D. Roger"},{"key":"3","article-title":"Tor metrics portal","author":"Tor Developers","year":"2018"},{"key":"4","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-36467-6_13"},{"key":"5","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180437"},{"key":"6","doi-asserted-by":"publisher","DOI":"10.1007\/11767831_1"},{"key":"7","first-page":"31","article-title":"Website fingerprinting: attacking popular privacy enhancing technologies with the multinomial na\u00efve-bayes classifier","author":"D. Herrmann"},{"key":"8","doi-asserted-by":"publisher","DOI":"10.1145\/2046556.2046570"},{"key":"9","first-page":"605","article-title":"Touching from a distance: website fingerprinting attacks and defenses","author":"X. Cai"},{"key":"10","doi-asserted-by":"publisher","DOI":"10.1145\/2517840.2517851"},{"key":"11","first-page":"143","article-title":"Effective attacks and provable defenses for website fingerprinting","author":"T. Wang"},{"key":"12","first-page":"1187","article-title":"K-fingerprinting: a robust scalable website fingerprinting technique","author":"J. Hayes"},{"key":"13","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23477"},{"key":"14","doi-asserted-by":"publisher","DOI":"10.1038\/nature14539"},{"key":"15","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243768"},{"key":"16","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0070"},{"key":"17","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354217"},{"key":"18","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr.2016.90"},{"key":"19","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.28"},{"key":"20","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660362"},{"key":"21","first-page":"1375","article-title":"Walkie-talkie: an effective and efcient defense against website fingerprinting","author":"T. Wang"},{"key":"22","first-page":"27","article-title":"Toward an efficient website fingerprinting defense","author":"M. Juarez"},{"key":"23","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2019.2907240"},{"key":"24","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM41043.2020.9155465"},{"key":"25","first-page":"717","article-title":"Zero-delay lightweight defenses against website fingerprinting","author":"J. Gong"},{"key":"26","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2016-0027"},{"key":"27","doi-asserted-by":"publisher","DOI":"10.1145\/3065386"},{"key":"28","first-page":"2493","article-title":"Natural language processing (almost) from scratch","volume":"12","author":"R. Collobert","year":"2011","journal-title":"Journal of Machine Learning Research"},{"key":"29","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23105"},{"key":"30","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0043"},{"key":"31","article-title":"Very deep convolutional networks for large-scale image recognition","author":"K. Simonyan"},{"key":"32","article-title":"Wavenet: a generative model for raw audio","author":"A. Van Den Oord","year":"2016"},{"key":"33","article-title":"Multi-scale context aggregation by dilated convolutions","author":"Y. Fisher","year":"2016"},{"key":"34","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2020-0043"},{"key":"35","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/d19-1670"},{"key":"36","article-title":"mixup: beyond empirical risk minimization","author":"H. Zhang"},{"key":"37","doi-asserted-by":"publisher","DOI":"10.1109\/ssci.2018.8628917"},{"key":"38","article-title":"Improving deep learning using generic data augmentation","author":"L. Taylor","year":"2017"},{"issue":"1","key":"39","doi-asserted-by":"crossref","first-page":"60","DOI":"10.1186\/s40537-019-0197-0","article-title":"A survey on image data augmentation for deep learning","volume":"6","author":"S. Connor","year":"2019","journal-title":"Journal of Big Data"},{"key":"40","first-page":"2611","article-title":"Convolutional neural networks for patient-specific ecg classification","author":"S. Kiranyaz"},{"key":"41","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"42","article-title":"Deep learning using rectified linear units (relu)","author":"A. F. Agarap","year":"2018"},{"key":"43","article-title":"Algorithms for hyper-parameter optimization","author":"B. James"},{"key":"44","volume-title":"Statistical Learning Theory","author":"V. Vapnik","year":"1998"},{"key":"45","article-title":"Intriguing properties of neural networks","author":"C. Szegedy","year":"2013"},{"key":"46","first-page":"416","article-title":"Vicinal risk minimization","volume-title":"Neural Information Processing Systems","author":"C. Olivier","year":"2000"},{"key":"47","article-title":"Keras","author":"F. Chollet","year":"2015"},{"key":"48","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660368"},{"key":"49","doi-asserted-by":"publisher","DOI":"10.1109\/icc.2014.6883388"},{"key":"50","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2020.102631"},{"key":"51","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2015.07.064"},{"key":"52","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01246-5_17"},{"key":"53","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i04.5763"},{"key":"54","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3048756"},{"key":"55","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2019.03.019"},{"key":"56","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-017-0955-8"}],"container-title":["Security and Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2021\/2840289.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2021\/2840289.xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2021\/2840289.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,9,16]],"date-time":"2021-09-16T21:35:49Z","timestamp":1631828149000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.hindawi.com\/journals\/scn\/2021\/2840289\/"}},"subtitle":[],"editor":[{"given":"Weizhi","family":"Meng","sequence":"additional","affiliation":[],"role":[{"role":"editor","vocabulary":"crossref"}]}],"short-title":[],"issued":{"date-parts":[[2021,9,15]]},"references-count":56,"alternative-id":["2840289","2840289"],"URL":"https:\/\/doi.org\/10.1155\/2021\/2840289","relation":{},"ISSN":["1939-0122","1939-0114"],"issn-type":[{"value":"1939-0122","type":"electronic"},{"value":"1939-0114","type":"print"}],"subject":[],"published":{"date-parts":[[2021,9,15]]}}}