Lightweight Graph Mining for Website Fingerprinting Guided by Structure Knowledge
- 28 July 2025
- journal article
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Computational Social Systems
- Vol. 13 (1) , 97-109
Abstract
Website fingerprinting (WF) attacks detect malicious websites and safeguard network security by analyzing clients’ browsing traffic. Numerous phishing and pirate websites persist in utilizing Hypertext transfer protocol (HTTP) owing to free transport layer security (TLS) certificates that are readily traceable; thus, they commonly evade deep packet inspection via server cluster, port mapping, and domain generation algorithms. Nowadays, the accurate identification of these websites is dependent on WF attacks developed by deep learning algorithms. Network traffic possesses massive heterogeneous data and high-dimensional complex logical relationships, making it challenging to develop efficient traffic classifiers through generic representation methods. Graphs work well in representing heterogeneous data, but their processing complexity often limits their application in WF. The research proposed a structure-knowledge-guided lightweight graph mining method for WF attacks (SKGM-WF) combining graph generation and association analysis. The heterogeneous graph generation algorithm transformed the input multimodal traffic representation to mine the core structure of graphs using knowledge from HTTP website structures. The association analysis algorithm achieved classification by mining frequent items to construct WFs. A dataset containing over one million website flows is used to evaluate WF attacks. The results indicated that the proposed WF attack consistently categorized websites with over 90% accuracy in several scenarios, which is a fantastic parallel to other state-of-the-art WF attacks. Most notably, its processing time has been reduced by over 31.2%, which is superior for large-scale and automated scenarios.Keywords
Funding Information
- National Natural Science Foundation of China (U2436601)
- National Natural Science Foundation of China (U21B2003)
- National Natural Science Foundation of China (62072250)
- National Natural Science Foundation of China (61602247)
- National Key Research and Development Program of China (2021QY0700)
This publication has 30 references indexed in Scilit:
- M2VT-IDS: A multi-task multi-view learning architecture for designing IoT intrusion detection systemInternet of Things, 2024
- A Levenshtein distance-based method for word segmentation in corpus augmentation of geoscience textsAnnals of GIS, 2023
- Machine Learning-Powered Encrypted Network Traffic Analysis: A Comprehensive SurveyIEEE Communications Surveys & Tutorials, 2022
- Node-Imbalance Learning on Heterogeneous Graph for Pirated Video Website Detection2022
- Identification of Network Application Behaviors Hiding in HTTP TunnelsIETE Technical Review, 2020
- Large-Scale Mobile App Identification Using Deep LearningIEEE Access, 2019
- Association Analysis Algorithm Based on Knowledge Graph for SPACE-Ground Integrated Network2018
- Deep IP flow inspection to detect beyond network anomaliesComputer Communications, 2017
- AppScanner: Automatic Fingerprinting of Smartphone Apps from Encrypted Network Traffic2016
- gSpan: graph-based substructure pattern mining2003