Search papers, labs, and topics across Lattice.
This paper introduces Chameleon, a novel defense mechanism against website fingerprinting (WF) attacks on Tor traffic that employs many-to-many randomized traffic morphing. By selecting morphing candidates with high intra-class diversity and low inter-class disparity, Chameleon enhances adversarial uncertainty and significantly improves robustness against both adversarial training and defense-aware autoencoder (DAAE) attacks. The evaluation shows that Chameleon outperforms existing defenses, reducing attack accuracy by up to 36.74% while also decreasing bandwidth and time overhead by 34.12% and 60.38%, respectively.
Chameleon slashes adversarial attack accuracy by up to 36.74% while minimizing bandwidth and time overhead, setting a new standard for Tor traffic defense.
Website fingerprinting (WF) attacks can infer users'browsing activities from encrypted Tor traffic by exploiting side-channel features. Although many WF defenses have been proposed, we find that most existing defenses create learnable web trace mapping features. We further show that robustness against adversarial training does not necessarily imply robustness against defense-aware autoencoder (DAAE)-based attacks. To address these limitations, we present Chameleon, a robust WF defense based on many-to-many randomized traffic morphing. Chameleon selects morphing candidates with high intra-class diversity and low inter-class disparity. Chameleon randomly maps each webpage trace to multiple candidates, and allows different webpages to share morphing targets, thereby increasing adversarial uncertainty. For practical Tor deployment, Chameleon introduces a radix-trie-based synchronization mechanism that enables pluggable transport (PT) endpoints to identify consistent morphing traces using packet-direction prefixes, together with trace mutation and normalized prefix matching to reduce overhead. We evaluate Chameleon against six state-of-the-art defenses and five WF attacks on three public datasets in closed- and open-world settings. Compared with Adaptive Tamaraw, Chameleon reduces adversarial-training-based attack accuracy by up to 36.74% while reducing bandwidth and time overhead by 34.12% and 60.38%, respectively. Under DAAE-based RF attacks on GTT23, Chameleon limits attack performance to 35.19% F1-score while Adaptive Tamaraw only limits it to 88.22% F1-score. In the real-world PT bridge evaluation, Chameleon substantially reduces the effectiveness of strong WF attacks while incurring only 16.25% time overhead.
