TFAN: A Task-adaptive Feature Alignment Network for few-shot website fingerprinting attacks on Tor

Abstract

Few-shot website fingerprinting (WF) attacks aim to infer which website a user browsed through anonymity networks, such as Tor, using limited labeled traces. Recent methods either adopt complex metric strategies or perform time-consuming transfer learning, neither of which yields the most efficient performance in dynamic network environments. In this paper, we introduce a novel Task-adaptive Feature Alignment Network (TFAN) following the meta-learning paradigm. TFAN regards the few-shot WF attack as a feature alignment problem in class latent space, aiming to depict each location in the query feature map as a weighted sum of support features of a given class. Ridge regression provides a closed-form solution without extra parameters or techniques, ensuring high computational efficiency. Moreover, we also propose a Task-adaptive Modulation Unit (TMU), which activates the differences between support prototypes to generate task-level channel weights, making channels with significant discriminative details for each task contribute more to alignment. Extensive experiments on public Tor datasets demonstrate the superiority of TFAN in different scenarios. Notably, it is the only method that maintains over 90% accuracy in the 1-shot setting even 42 days later. Our code is available at https://github.com/Crybaby98/TFAN.