{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,25]],"date-time":"2026-06-25T01:55:18Z","timestamp":1782352518305,"version":"3.54.5"},"reference-count":39,"publisher":"Privacy Enhancing Technologies Symposium Advisory Board","issue":"3","license":[{"start":{"date-parts":[[2019,7,1]],"date-time":"2019-07-01T00:00:00Z","timestamp":1561939200000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by-nc-nd\/3.0"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019,7,1]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Recent advances in Deep Neural Network (DNN) architectures have received a great deal of attention due to their ability to outperform state-of-the-art machine learning techniques across a wide range of application, as well as automating the feature engineering process. In this paper, we broadly study the applicability of deep learning to website fingerprinting. First, we show that unsupervised DNNs can generate lowdimensional informative features that improve the performance of state-of-the-art website fingerprinting attacks. Second, when used as classifiers, we show that they can exceed performance of existing attacks across a range of application scenarios, including fingerprinting Tor website traces, fingerprinting search engine queries over Tor, defeating fingerprinting defenses, and fingerprinting TLS-encrypted websites. Finally, we investigate which site-level features of a website influence its fingerprintability by DNNs.<\/jats:p>","DOI":"10.2478\/popets-2019-0043","type":"journal-article","created":{"date-parts":[[2019,7,20]],"date-time":"2019-07-20T09:31:31Z","timestamp":1563615091000},"page":"191-209","source":"Crossref","is-referenced-by-count":51,"title":["<i>p<\/i><sup>1<\/sup>-FP: Extraction, Classification, and Prediction of Website Fingerprints with Deep Learning"],"prefix":"10.56553","volume":"2019","author":[{"given":"Se Eun","family":"Oh","sequence":"first","affiliation":[{"name":"University of Minnesota"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Saikrishna","family":"Sunkam","sequence":"additional","affiliation":[{"name":"University of Minnesota"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nicholas","family":"Hopper","sequence":"additional","affiliation":[{"name":"University of Minnesota"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"35752","published-online":{"date-parts":[[2019,7,12]]},"reference":[{"key":"2022061417252295386_j_popets-2019-0043_ref_001_w2aab3b7c11b1b6b1ab1ab1Aa","unstructured":"[1] Tensorflow. https:\/\/www.tensorflow.org\/."},{"key":"2022061417252295386_j_popets-2019-0043_ref_002_w2aab3b7c11b1b6b1ab1ab2Aa","unstructured":"[2] Tflearn. http:\/\/tflearn.org\/."},{"key":"2022061417252295386_j_popets-2019-0043_ref_003_w2aab3b7c11b1b6b1ab1ab3Aa","unstructured":"[3] Tor browser crawler. https:\/\/github.com\/webfp\/tor-browsercrawler."},{"key":"2022061417252295386_j_popets-2019-0043_ref_004_w2aab3b7c11b1b6b1ab1ab4Aa","unstructured":"[4] P. Baldi. Autoencoders, unsupervised learning, and deep architectures. In Proceedings of ICML Workshop on Unsupervised and Transfer Learning, pages 37\u201349, 2012."},{"key":"2022061417252295386_j_popets-2019-0043_ref_005_w2aab3b7c11b1b6b1ab1ab5Aa","doi-asserted-by":"crossref","unstructured":"[5] Y. Bengio, Y. LeCun, et al. Scaling learning algorithms towards ai. Large-scale kernel machines, 34(5):1\u201341, 2007.","DOI":"10.7551\/mitpress\/7496.003.0016"},{"key":"2022061417252295386_j_popets-2019-0043_ref_006_w2aab3b7c11b1b6b1ab1ab6Aa","unstructured":"[6] J. Bergstra, D. Yamins, and D. Cox. Making a science of model search: Hyperparameter optimization in hundreds of dimensions for vision architectures. In International Conference on Machine Learning, pages 115\u2013123, 2013."},{"key":"2022061417252295386_j_popets-2019-0043_ref_007_w2aab3b7c11b1b6b1ab1ab7Aa","unstructured":"[7] J. Bergstra, D. Yamins, and D. Cox. Making a science of model search: Hyperparameter optimization in hundreds of dimensions for vision architectures. In International Conference on Machine Learning, pages 115\u2013123, 2013."},{"key":"2022061417252295386_j_popets-2019-0043_ref_008_w2aab3b7c11b1b6b1ab1ab8Aa","doi-asserted-by":"crossref","unstructured":"[8] L. Breiman. Random forests. Machine Learning, 45(1):5\u201332, 2001.10.1023\/A:1010933404324","DOI":"10.1023\/A:1010933404324"},{"key":"2022061417252295386_j_popets-2019-0043_ref_009_w2aab3b7c11b1b6b1ab1ab9Aa","doi-asserted-by":"crossref","unstructured":"[9] X. Cai, R. Nithyanand, T. Wang, R. Johnson, and I. Goldberg. A systematic approach to developing and evaluating website fingerprinting defenses. In Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, CCS \u201914, pages 227\u2013238, New York, NY, USA, 2014. ACM.10.1145\/2660267.2660362","DOI":"10.1145\/2660267.2660362"},{"key":"2022061417252295386_j_popets-2019-0043_ref_010_w2aab3b7c11b1b6b1ab1ac10Aa","doi-asserted-by":"crossref","unstructured":"[10] K. P. Dyer, S. E. Coull, T. Ristenpart, and T. Shrimpton. Peek-a-boo, i still see you: Why efficient traffic analysis countermeasures fail. In Proceedings of the 2012 IEEE Symposium on Security and Privacy, SP \u201912, pages 332\u2013346, Washington, DC, USA, 2012. IEEE Computer Society.10.1109\/SP.2012.28","DOI":"10.1109\/SP.2012.28"},{"key":"2022061417252295386_j_popets-2019-0043_ref_011_w2aab3b7c11b1b6b1ab1ac11Aa","doi-asserted-by":"crossref","unstructured":"[11] M. Gardner and S. Dorling. Artificial neural networks (the multilayer perceptron)\u2014a review of applications in the atmospheric sciences. Atmospheric Environment, 32(14-15):2627\u20132636, aug 1998.10.1016\/S1352-2310(97)00447-0","DOI":"10.1016\/S1352-2310(97)00447-0"},{"key":"2022061417252295386_j_popets-2019-0043_ref_012_w2aab3b7c11b1b6b1ab1ac12Aa","unstructured":"[12] J. Hayes and G. Danezis. k-fingerprinting: A robust scalable website fingerprinting technique. In USENIX Security Symposium, pages 1187\u20131203, 2016."},{"key":"2022061417252295386_j_popets-2019-0043_ref_013_w2aab3b7c11b1b6b1ab1ac13Aa","doi-asserted-by":"crossref","unstructured":"[13] K. He, X. Zhang, S. Ren, and J. Sun. Deep residual learning for image recognition. In Proceedings of the IEEE conference on computer vision and pattern recognition, pages 770\u2013778, 2016.10.1109\/CVPR.2016.90","DOI":"10.1109\/CVPR.2016.90"},{"key":"2022061417252295386_j_popets-2019-0043_ref_014_w2aab3b7c11b1b6b1ab1ac14Aa","doi-asserted-by":"crossref","unstructured":"[14] G. E. Hinton and R. R. Salakhutdinov. Reducing the Dimensionality of Data with Neural Networks. Science, 313(5786), 2006.10.1126\/science.112764716873662","DOI":"10.1126\/science.1127647"},{"key":"2022061417252295386_j_popets-2019-0043_ref_015_w2aab3b7c11b1b6b1ab1ac15Aa","doi-asserted-by":"crossref","unstructured":"[15] A. Hintz. Fingerprinting websites using traffic analysis. In International Workshop on Privacy Enhancing Technologies, pages 171\u2013178. Springer, 2002.10.1007\/3-540-36467-6_13","DOI":"10.1007\/3-540-36467-6_13"},{"key":"2022061417252295386_j_popets-2019-0043_ref_016_w2aab3b7c11b1b6b1ab1ac16Aa","doi-asserted-by":"crossref","unstructured":"[16] A. Houmansadr, N. Kiyavash, and N. Borisov. Non-blind watermarking of network flows. IEEE\/ACM Transactions on Networking, 22(4):1232\u20131244, 2014.10.1109\/TNET.2013.2272740","DOI":"10.1109\/TNET.2013.2272740"},{"key":"2022061417252295386_j_popets-2019-0043_ref_017_w2aab3b7c11b1b6b1ab1ac17Aa","doi-asserted-by":"crossref","unstructured":"[17] M. Juarez, S. Afroz, G. Acar, C. Diaz, and R. Greenstadt. A critical evaluation of website fingerprinting attacks. In Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, pages 263\u2013274. ACM, 2014.10.1145\/2660267.2660368","DOI":"10.1145\/2660267.2660368"},{"key":"2022061417252295386_j_popets-2019-0043_ref_018_w2aab3b7c11b1b6b1ab1ac18Aa","doi-asserted-by":"crossref","unstructured":"[18] M. Juarez, M. Imani, M. Perry, C. Diaz, and M. Wright. Toward an efficient website fingerprinting defense. In European Symposium on Research in Computer Security, pages 27\u201346. Springer, 2016.10.1007\/978-3-319-45744-4_2","DOI":"10.1007\/978-3-319-45744-4_2"},{"key":"2022061417252295386_j_popets-2019-0043_ref_019_w2aab3b7c11b1b6b1ab1ac19Aa","unstructured":"[19] D. P. Kingma and M. Welling. Auto-encoding variational bayes. arXiv preprint arXiv:1312.6114, 2013."},{"key":"2022061417252295386_j_popets-2019-0043_ref_020_w2aab3b7c11b1b6b1ab1ac20Aa","unstructured":"[20] A. Krizhevsky, I. Sutskever, and G. E. Hinton. Imagenet classification with deep convolutional neural networks. In Advances in neural information processing systems, pages 1097\u20131105, 2012."},{"key":"2022061417252295386_j_popets-2019-0043_ref_021_w2aab3b7c11b1b6b1ab1ac21Aa","doi-asserted-by":"crossref","unstructured":"[21] S. Lawrence, C. Giles, Ah Chung Tsoi, and A. Back. Face recognition: a convolutional neural-network approach. IEEE Transactions on Neural Networks, 8(1):98\u2013113, 1997.","DOI":"10.1109\/72.554195"},{"key":"2022061417252295386_j_popets-2019-0043_ref_022_w2aab3b7c11b1b6b1ab1ac22Aa","unstructured":"[22] Y. LeCun, B. E. Boser, J. S. Denker, D. Henderson, R. E. Howard, W. E. Hubbard, and L. D. Jackel. Handwritten digit recognition with a back-propagation network. In Advances in neural information processing systems, pages 396\u2013404, 1990."},{"key":"2022061417252295386_j_popets-2019-0043_ref_023_w2aab3b7c11b1b6b1ab1ac23Aa","unstructured":"[23] C. Louizos, K. Swersky, Y. Li, M. Welling, and R. Zemel. The variational fair autoencoder. arXiv preprint arXiv:1511.00830, 2015."},{"key":"2022061417252295386_j_popets-2019-0043_ref_024_w2aab3b7c11b1b6b1ab1ac24Aa","doi-asserted-by":"crossref","unstructured":"[24] A. Mousavi, A. B. Patel, and R. G. Baraniuk. A deep learning approach to structured signal recovery. In Communication, Control, and Computing (Allerton), 2015 53rd Annual Allerton Conference on, pages 1336\u20131343. IEEE, 2015.10.1109\/ALLERTON.2015.7447163","DOI":"10.1109\/ALLERTON.2015.7447163"},{"key":"2022061417252295386_j_popets-2019-0043_ref_025_w2aab3b7c11b1b6b1ab1ac25Aa","doi-asserted-by":"crossref","unstructured":"[25] M. Nasr, A. Houmansadr, and A. Mazumdar. Compressive traffic analysis: A new paradigm for scalable traffic analysis. In Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security. ACM, 2017.10.1145\/3133956.3134074","DOI":"10.1145\/3133956.3134074"},{"key":"2022061417252295386_j_popets-2019-0043_ref_026_w2aab3b7c11b1b6b1ab1ac26Aa","doi-asserted-by":"crossref","unstructured":"[26] S. E. Oh, S. Li, and N. Hopper. Fingerprinting Keywords in Search Queries over Tor. Proceedings on Privacy Enhancing Technologies, 2017(4):171\u2013190.10.1515\/popets-2017-0048","DOI":"10.1515\/popets-2017-0048"},{"key":"2022061417252295386_j_popets-2019-0043_ref_027_w2aab3b7c11b1b6b1ab1ac27Aa","doi-asserted-by":"crossref","unstructured":"[27] R. Overdorf, M. Juarez, G. Acar, R. Greenstadt, and C. Diaz. How unique is your. onion?: An analysis of the fingerprintability of tor onion services. In Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, pages 2021\u20132036. ACM, 2017.10.1145\/3133956.3134005","DOI":"10.1145\/3133956.3134005"},{"key":"2022061417252295386_j_popets-2019-0043_ref_028_w2aab3b7c11b1b6b1ab1ac28Aa","doi-asserted-by":"crossref","unstructured":"[28] A. Panchenko, F. Lanze, A. Zinnen, M. Henze, J. Pennekamp, K. Wehrle, and T. Engel. Website Fingerprinting at Internet Scale. 16th NDSS (NDSS 16), 2016.10.14722\/ndss.2016.23477","DOI":"10.14722\/ndss.2016.23477"},{"key":"2022061417252295386_j_popets-2019-0043_ref_029_w2aab3b7c11b1b6b1ab1ac29Aa","doi-asserted-by":"crossref","unstructured":"[29] A. Panchenko, L. Niessen, A. Zinnen, and T. Engel. Website fingerprinting in onion routing based anonymization networks. In Proceedings of the 10th annual ACM workshop on Privacy in the electronic society. ACM, 2011.10.1145\/2046556.2046570","DOI":"10.1145\/2046556.2046570"},{"key":"2022061417252295386_j_popets-2019-0043_ref_030_w2aab3b7c11b1b6b1ab1ac30Aa","unstructured":"[30] D. J. Rezende, S. Mohamed, and D. Wierstra. Stochastic backpropagation and approximate inference in deep generative models. arXiv preprint arXiv:1401.4082, 2014."},{"key":"2022061417252295386_j_popets-2019-0043_ref_031_w2aab3b7c11b1b6b1ab1ac31Aa","doi-asserted-by":"crossref","unstructured":"[31] V. Rimmer, D. Preuveneers, M. Juarez, T. Van Goethem, and W. Joosen. Automated website fingerprinting through deep learning. In Network & Distributed System Security Symposium (NDSS), 2018.10.14722\/ndss.2018.23105","DOI":"10.14722\/ndss.2018.23105"},{"key":"2022061417252295386_j_popets-2019-0043_ref_032_w2aab3b7c11b1b6b1ab1ac32Aa","doi-asserted-by":"crossref","unstructured":"[32] A. E. Robinson, P. S. Hammon, and V. R. de Sa. Explaining brightness illusions using spatial filtering and local response normalization. Vision research, 47(12):1631\u20131644, 2007.10.1016\/j.visres.2007.02.01717459448","DOI":"10.1016\/j.visres.2007.02.017"},{"key":"2022061417252295386_j_popets-2019-0043_ref_033_w2aab3b7c11b1b6b1ab1ac33Aa","doi-asserted-by":"crossref","unstructured":"[33] D. E. Rumelhart, G. E. Hinton, and R. J. Williams. Learning internal representations by error propagation. Technical report, California Univ San Diego La Jolla Inst for Cognitive Science, 1985.10.21236\/ADA164453","DOI":"10.21236\/ADA164453"},{"key":"2022061417252295386_j_popets-2019-0043_ref_034_w2aab3b7c11b1b6b1ab1ac34Aa","unstructured":"[34] K. Simonyan and A. Zisserman. Very deep convolutional networks for large-scale image recognition. arXiv preprint arXiv:1409.1556, 2014."},{"key":"2022061417252295386_j_popets-2019-0043_ref_035_w2aab3b7c11b1b6b1ab1ac35Aa","doi-asserted-by":"crossref","unstructured":"[35] P. Sirinam, M. Imani, M. Juarez, and M. Wright. Deep fingerprinting: Undermining website fingerprinting defenses with deep learning. In Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security. ACM, 2018.10.1145\/3243734.3243768","DOI":"10.1145\/3243734.3243768"},{"key":"2022061417252295386_j_popets-2019-0043_ref_036_w2aab3b7c11b1b6b1ab1ac36Aa","unstructured":"[36] N. Srivastava, G. Hinton, A. Krizhevsky, I. Sutskever, and R. Salakhutdinov. Dropout: A Simple Way to Prevent Neural Networks from Overfitting. Journal of Machine Learning Research, 15:1929\u20131958, 2014."},{"key":"2022061417252295386_j_popets-2019-0043_ref_037_w2aab3b7c11b1b6b1ab1ac37Aa","unstructured":"[37] T. Wang, X. Cai, R. Nithyanand, R. Johnson, and I. Goldberg. Effective Attacks and Provable Defenses for Website Fingerprinting. 23rd USENIX Security Symposium (USENIX Security 14), pages 143\u2013157, 2014."},{"key":"2022061417252295386_j_popets-2019-0043_ref_038_w2aab3b7c11b1b6b1ab1ac38Aa","doi-asserted-by":"crossref","unstructured":"[38] T. Wang and I. Goldberg. Improved website fingerprinting on tor. In Proceedings of the 12th ACM workshop on Workshop on privacy in the electronic society, pages 201\u2013212. ACM, 2013.10.1145\/2517840.2517851","DOI":"10.1145\/2517840.2517851"},{"key":"2022061417252295386_j_popets-2019-0043_ref_039_w2aab3b7c11b1b6b1ab1ac39Aa","unstructured":"[39] T. Wang and I. Goldberg. Walkie-Talkie: An Efficient Defense Against Passive Website Fingerprinting Attacks. 26th USENIX Security Symposium (USENIX Security 17), 2017."}],"container-title":["Proceedings on Privacy Enhancing Technologies"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/content.sciendo.com\/view\/journals\/popets\/2019\/3\/article-p191.xml","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.sciendo.com\/pdf\/10.2478\/popets-2019-0043","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,9,18]],"date-time":"2023-09-18T12:13:58Z","timestamp":1695039238000},"score":1,"resource":{"primary":{"URL":"https:\/\/petsymposium.org\/popets\/2019\/popets-2019-0043.php"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,7,1]]},"references-count":39,"journal-issue":{"issue":"3","published-online":{"date-parts":[[2019,7,12]]},"published-print":{"date-parts":[[2019,7,1]]}},"alternative-id":["10.2478\/popets-2019-0043"],"URL":"https:\/\/doi.org\/10.2478\/popets-2019-0043","relation":{},"ISSN":["2299-0984"],"issn-type":[{"value":"2299-0984","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,7,1]]}}}