Defending against Deep-Learning-Based Flow Correlation Attacks with Adversarial Examples

Table 5

The protection success rate of various adversarial examples against website fingerprint attacks with the same bandwidth overhead. PSR presents the protection success rate.

Data set	Method	Bandwidth overhead (L_∞)	K-NN (PSR) (%)	K-FP (PSR) (%)	Var-CNN (PSR) (%)
Sirinam	FGSM	0.20	97.2	97.4	80.3
	C&W	0.20	99.4	99.5	88.8
	Deepfool	0.20	99.7	99.3	94.5
	BIM	0.20	98.5	98.8	86.7
Rimmer	FGSM	0.20	97.2	96.7	86.7
	C&W	0.20	99.9	99.3	93.2
	Deepfool	0.20	98.7	98.1	97.5
	BIM	0.20	98.2	97.5	89.4