{"id":"https://openalex.org/W7128694786","doi":"https://doi.org/10.1109/tifs.2026.3663989","title":"TrapFlow: Controllable Website Fingerprinting Defense via Dynamic Backdoor Learning","display_name":"TrapFlow: Controllable Website Fingerprinting Defense via Dynamic Backdoor Learning","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7128694786","doi":"https://doi.org/10.1109/tifs.2026.3663989"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2026.3663989","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3663989","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5122882218","display_name":"Siyuan Liang","orcid":null},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Siyuan Liang","raw_affiliation_strings":["School of Computing, National University of Singapore, Queenstown, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-6154-0233","affiliations":[{"raw_affiliation_string":"School of Computing, National University of Singapore, Queenstown, Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030166737","display_name":"Jiajun Gong","orcid":"https://orcid.org/0000-0001-9906-8838"},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiajun Gong","raw_affiliation_strings":["Department of New Networks, Peng Cheng Laboratory, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0001-9906-8838","affiliations":[{"raw_affiliation_string":"Department of New Networks, Peng Cheng Laboratory, Shenzhen, China","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Tianmeng Fang","orcid":"https://orcid.org/0009-0005-7234-9468"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Tianmeng Fang","raw_affiliation_strings":["School of Computing, National University of Singapore, Queenstown, Singapore"],"raw_orcid":"https://orcid.org/0009-0005-7234-9468","affiliations":[{"raw_affiliation_string":"School of Computing, National University of Singapore, Queenstown, Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061958718","display_name":"A. B. Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Aishan Liu","raw_affiliation_strings":["School of Computer Science and Engineering, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-4224-1318","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100453702","display_name":"Tao Wang","orcid":"https://orcid.org/0000-0003-3886-0420"},"institutions":[{"id":"https://openalex.org/I18014758","display_name":"Simon Fraser University","ror":"https://ror.org/0213rcc28","country_code":"CA","type":"education","lineage":["https://openalex.org/I18014758"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Tao Wang","raw_affiliation_strings":["School of Computing Science, Simon Fraser University, Burnaby, BC, Canada"],"raw_orcid":"https://orcid.org/0000-0003-3886-0420","affiliations":[{"raw_affiliation_string":"School of Computing Science, Simon Fraser University, Burnaby, BC, Canada","institution_ids":["https://openalex.org/I18014758"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125689777","display_name":"xiaochun cao","orcid":null},"institutions":[{"id":"https://openalex.org/I157773358","display_name":"Sun Yat-sen University","ror":"https://ror.org/0064kty71","country_code":"CN","type":"education","lineage":["https://openalex.org/I157773358"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaochun Cao","raw_affiliation_strings":["School of Cyber Science and Technology, Sun Yat-sen University, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0001-7141-708X","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Technology, Sun Yat-sen University, Shenzhen, China","institution_ids":["https://openalex.org/I157773358"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125776379","display_name":"Dacheng Tao","orcid":null},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Dacheng Tao","raw_affiliation_strings":["College of Computing and Data Science, Nanyang Technological University, Jurong West, Singapore"],"raw_orcid":"https://orcid.org/0000-0001-7225-5449","affiliations":[{"raw_affiliation_string":"College of Computing and Data Science, Nanyang Technological University, Jurong West, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":null,"display_name":"Ee-Chien Chang","orcid":"https://orcid.org/0000-0003-4613-0866"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Ee-Chien Chang","raw_affiliation_strings":["School of Computing, National University of Singapore, Queenstown, Singapore"],"raw_orcid":"https://orcid.org/0000-0003-4613-0866","affiliations":[{"raw_affiliation_string":"School of Computing, National University of Singapore, Queenstown, Singapore","institution_ids":["https://openalex.org/I165932596"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.14795068,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"21","issue":null,"first_page":"2610","last_page":"2625"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9477999806404114,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9477999806404114,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.009800000116229057,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.0027000000700354576,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.7394000291824341},{"id":"https://openalex.org/keywords/blacklisting","display_name":"Blacklisting","score":0.6333000063896179},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6007999777793884},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.44440001249313354},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.42340001463890076},{"id":"https://openalex.org/keywords/indirection","display_name":"Indirection","score":0.39149999618530273},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.3758000135421753},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.33149999380111694},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.325300008058548},{"id":"https://openalex.org/keywords/memorization","display_name":"Memorization","score":0.3181999921798706}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8748000264167786},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.7394000291824341},{"id":"https://openalex.org/C2779797433","wikidata":"https://www.wikidata.org/wiki/Q632959","display_name":"Blacklisting","level":2,"score":0.6333000063896179},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6007999777793884},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45210000872612},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.44440001249313354},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.42340001463890076},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.40639999508857727},{"id":"https://openalex.org/C89377073","wikidata":"https://www.wikidata.org/wiki/Q1171224","display_name":"Indirection","level":2,"score":0.39149999618530273},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.3758000135421753},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3564000129699707},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.33149999380111694},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.325300008058548},{"id":"https://openalex.org/C30038468","wikidata":"https://www.wikidata.org/wiki/Q4354775","display_name":"Memorization","level":2,"score":0.3181999921798706},{"id":"https://openalex.org/C136643341","wikidata":"https://www.wikidata.org/wiki/Q1361526","display_name":"Reachability","level":2,"score":0.3138999938964844},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.31119999289512634},{"id":"https://openalex.org/C32834561","wikidata":"https://www.wikidata.org/wiki/Q660730","display_name":"Subspace topology","level":2,"score":0.3027999997138977},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3025999963283539},{"id":"https://openalex.org/C2777826928","wikidata":"https://www.wikidata.org/wiki/Q3745713","display_name":"Fingerprint (computing)","level":2,"score":0.3025999963283539},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2971999943256378},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.28940001130104065},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.2847000062465668},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.2831000089645386},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2802000045776367},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2752000093460083},{"id":"https://openalex.org/C2777723229","wikidata":"https://www.wikidata.org/wiki/Q4367921","display_name":"Learnability","level":2,"score":0.27410000562667847},{"id":"https://openalex.org/C2780505938","wikidata":"https://www.wikidata.org/wiki/Q17093282","display_name":"Unavailability","level":2,"score":0.27410000562667847},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.27379998564720154},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.2734000086784363},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.2727000117301941},{"id":"https://openalex.org/C151319957","wikidata":"https://www.wikidata.org/wiki/Q752739","display_name":"Asynchronous communication","level":2,"score":0.2669000029563904},{"id":"https://openalex.org/C2776196576","wikidata":"https://www.wikidata.org/wiki/Q196113","display_name":"Camouflage","level":2,"score":0.26499998569488525},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.25949999690055847},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2565999925136566},{"id":"https://openalex.org/C63584917","wikidata":"https://www.wikidata.org/wiki/Q333286","display_name":"Bounding overwatch","level":2,"score":0.2538999915122986},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.2513999938964844},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.25119999051094055}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tifs.2026.3663989","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3663989","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:dr.ntu.edu.sg:10356/212097","is_oa":false,"landing_page_url":"https://hdl.handle.net/10356/212097","pdf_url":null,"source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":44,"referenced_works":["https://openalex.org/W1655958391","https://openalex.org/W1993568446","https://openalex.org/W2012210084","https://openalex.org/W2021949962","https://openalex.org/W2027177092","https://openalex.org/W2088565190","https://openalex.org/W2108217512","https://openalex.org/W2120702739","https://openalex.org/W2135579486","https://openalex.org/W2161029789","https://openalex.org/W2272516773","https://openalex.org/W2302255633","https://openalex.org/W2604754095","https://openalex.org/W2783301790","https://openalex.org/W2904027722","https://openalex.org/W2913901113","https://openalex.org/W2934843808","https://openalex.org/W2963704216","https://openalex.org/W2964602598","https://openalex.org/W2990270730","https://openalex.org/W3031127859","https://openalex.org/W3047194494","https://openalex.org/W3106813043","https://openalex.org/W3107803931","https://openalex.org/W3107990944","https://openalex.org/W3154894367","https://openalex.org/W3165559974","https://openalex.org/W3169619208","https://openalex.org/W3191453585","https://openalex.org/W3193903060","https://openalex.org/W3211002588","https://openalex.org/W4232795368","https://openalex.org/W4283205753","https://openalex.org/W4288057746","https://openalex.org/W4289950804","https://openalex.org/W4312959179","https://openalex.org/W4384948652","https://openalex.org/W4385080294","https://openalex.org/W4386065735","https://openalex.org/W4388262486","https://openalex.org/W4388856908","https://openalex.org/W4389279136","https://openalex.org/W4402264442","https://openalex.org/W4413925826"],"related_works":[],"abstract_inverted_index":{"Website":[0],"fingerprinting":[1,63],"(WF)":[2],"attacks,":[3],"which":[4],"covertly":[5],"monitor":[6],"user":[7,21],"communications":[8],"to":[9,20,27,41,78,95,105,126,172,196],"identify":[10],"the":[11,73,92,102,116,119,134,145,165,168,188,191,232],"web":[12],"pages":[13],"they":[14],"visit,":[15],"pose":[16],"a":[17,59,122,216,238],"serious":[18],"threat":[19],"privacy.":[22],"Existing":[23],"WF":[24],"defenses":[25,45],"attempt":[26],"reduce":[28],"attack":[29,193],"accuracy":[30,189,211],"by":[31,82,107,212],"disrupting":[32],"traffic":[33],"patterns,":[34],"but":[35,224],"attackers":[36],"can":[37],"retrain":[38],"their":[39,48],"models":[40],"adapt,":[42],"making":[43],"these":[44,55,137],"ineffective.":[46],"Meanwhile,":[47],"high":[49],"overhead":[50],"limits":[51],"deployability.":[52],"To":[53,158],"overcome":[54],"limitations,":[56],"we":[57,163],"introduce":[58],"novel":[60],"controllable":[61],"website":[62,89],"defense":[64],"called":[65],"TrapFlow":[66,71,113,185],"based":[67],"on":[68,109,142],"backdoor":[69],"learning.":[70],"exploits":[72],"tendency":[74],"of":[75,190,234],"neural":[76],"networks":[77],"memorize":[79],"subtle":[80],"patterns":[81,138],"injecting":[83],"crafted":[84],"trigger":[85,120,146,166],"sequences":[86],"into":[87],"targeted":[88],"traffic,":[90],"causing":[91,155],"attacker\u2019s":[93],"model":[94,117,156],"build":[96],"incorrect":[97],"associations":[98],"during":[99],"training.":[100],"If":[101],"attacker":[103,135],"attempts":[104],"adapt":[106],"training":[108],"such":[110],"noisy":[111],"data,":[112,144],"ensures":[114],"that":[115,184],"internalizes":[118],"as":[121,148],"dominant":[123],"feature,":[124],"leading":[125],"widespread":[127],"misclassification":[128],"across":[129],"unrelated":[130],"websites.":[131],"Conversely,":[132],"if":[133],"ignores":[136],"and":[139,177],"trains":[140],"only":[141,213],"clean":[143],"behaves":[147],"an":[149],"adversarial":[150],"patch":[151],"at":[152,215],"inference":[153],"time,":[154],"misclassification.":[157],"achieve":[159],"this":[160],"dual":[161],"effect,":[162],"optimize":[164],"using":[167],"Fast":[169],"Levenshtein-like":[170],"distance":[171],"maximize":[173],"both":[174],"its":[175],"learnability":[176],"distinctiveness":[178],"from":[179,194],"normal":[180],"traffic.":[181],"Experiments":[182],"show":[183],"significantly":[186],"reduces":[187,210],"RF":[192],"99%":[195],"6%":[197],"with":[198,225],"74%":[199],"data":[200],"overhead.":[201,228],"This":[202],"compares":[203],"favorably":[204],"against":[205],"two":[206],"SOTA":[207],"defenses:":[208],"FRONT":[209],"2%":[214],"similar":[217],"overhead,":[218],"while":[219],"Palette":[220],"achieves":[221],"32%":[222],"accuracy,":[223],"48%":[226],"more":[227],"We":[229],"further":[230],"validate":[231],"practicality":[233],"our":[235],"method":[236],"in":[237],"real":[239],"Tor":[240],"network":[241],"environment.":[242]},"counts_by_year":[],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2026-02-13T00:00:00"}