Few-Shot Website Fingerprinting Attack with Data Augmentation

Table 4

Results of open-world WF attack on (target classes) +  (nontarget classes). Pre : precision and Rec : recall. We reported two settings: one is tuned for best precision (top), and one for recall (bottom).

Method	Tuned for precision
	5-shot		10-shot		15-shot		20-shot
	Pre	Rec	Pre	Rec	Pre	Rec	Pre	Rec
ResNet-34 [18]	32.5	4.7	42.1	6.6	50.4	21.8	61.3	39.6
Var-CNN [16]	39.7	2.7	58.8	9.2	74.2	35.8	78.0	54.4
ResNet-34 + HDA	72.7	0.8		8.7		43.8	92.6	55.1
Var-CNN + HDA		6.9	91.2	47.2	91.4	64.3		66.6
Tuned for recall
ResNet-34 [18]	12	25.6	19.2	37.8	30.2	54.5	34.9	68.6
Var-CNN [16]	13.9	27.1	26.7	52.8	37.4	73.9	42.2	82.6
ResNet-34 + HDA	21.1	37.4	36.2	68.9	45.7	89.2	47.2	91.4
Var-CNN + HDA	28.0		46.9		49.3		49.1