探究HTTP/2抵御网页指纹识别的隐私保护潜力
Understanding the Privacy-Preserving Potential of HTTP/2 Against Webpage Fingerprinting
- CISPA Helmholtz Center for Information Security（CISPA亥姆霍兹信息安全中心）
机构由 AI 辅助整理，请以论文原文为准。
AI总结：
本研究聚焦HTTP/2的应用层防御，利用其特性模拟多种防御，通过统一蓝图评估其隐私-开销权衡，挖掘其抵御网页指纹识别的隐私保护潜力。
AI中文摘要：
网站指纹识别（WF）攻击可仅通过加密的HTTPS流量推断用户访问的网页，即便无需解密也会损害隐私。WF防御通常通过噪声、填充、延迟或流分割来塑造流量，但这类防御多从Tor或VPN等封装协议的角度研究，而非应用层（HTTP）。本研究聚焦于最广泛部署的HTTP版本HTTP/2所支持的应用层防御。我们展示了如何通过HTTP/2特性在客户端（HTTPOS、LLaMA、FRONT、Tamaraw）和服务器端（ALPaCA、Tamaraw）模拟已知防御。进一步表明，HTTP/2的主动资源建议、多路复用和流量控制等特性，为可在两端部署的轻量且有效的防御提供了未开发的潜力。我们使用统一蓝图评估这些防御，该蓝图针对每个数据集校准防御参数，结合实用攻击、信息论泄漏估计和开销测量。对于每种防御，此框架识别经超参数调优的最强指纹识别模型，使用两种信息论泄漏估计器估计防御诱导的剩余不确定性，同时考虑防御的隐私-开销权衡。
英文摘要：
Website fingerprinting (WF) attacks can infer which webpage a user visits from encrypted HTTPS traffic alone, compromising privacy even without decryption. WF defenses commonly shape traffic through noise, padding, delays, or flow splitting, yet they are most often studied from the perspective of encapsulating protocols like Tor or VPN rather than at the application layer (HTTP). In this work, we focus on application-layer defenses enabled by the most widely deployed version of HTTP, HTTP/2. We demonstrate how known defenses can be emulated through HTTP/2 features at the client side (HTTPOS, LLaMA, FRONT, Tamaraw) and the server side (ALPaCA, Tamaraw). We further show that HTTP/2 features, such as proactive resource suggestion, multiplexing, and flow control, offer untapped potential for lightweight yet effective defenses deployable at both endpoints. We evaluate these defenses using a unified blueprint that calibrates defense parameters per dataset, then combines practical attacks, information-theoretic leakage estimates, and overhead measurements. For each defense, this framework identifies the strongest hyperparameter-tuned fingerprinting model and estimates the residual uncertainty induced by the defense using two information-theoretic leakage estimators, all while accounting for the defense's privacy-overhead trade-offs.
