# Var-CNN: A Data-Efficient Website Fingerprinting Attack Based on Deep Learning

arXiv: https://arxiv.org/abs/1802.10215 · HTML: https://mlsanity.com/paper/1802.10215/

## Key facts

- Cited by 15 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 28 Feb 2018.

## Built on by (most cited first, 15 of 15)

- [Extensible Machine Learning for Encrypted Network Traffic Application Labeling via Uncertainty Quantification](https://mlsanity.com/paper/2205.05628/) (2022)
- [Robust and Reliable Early-Stage Website Fingerprinting Attacks via Spatial-Temporal Distribution Analysis](https://mlsanity.com/paper/2407.00918/) (2024)
- [TrapFlow: Controllable Website Fingerprinting Defense via Dynamic Backdoor Learning](https://mlsanity.com/paper/2412.11471/) (2024)
- [Efficient and Low Overhead Website Fingerprinting Attacks and Defenses based on TCP/IP Traffic](https://mlsanity.com/paper/2302.13763/) (2023)
- [Towards Fine-Grained Webpage Fingerprinting at Scale](https://mlsanity.com/paper/2409.04341/) (2024)
- [ResAware: Cross-Environment Website Fingerprinting via Resource-Privileged Distillation](https://mlsanity.com/paper/2606.17462/) (2026)
- [From Privacy to Workflow Integrity: Communication-Graph Metadata in Autonomous Agent Interoperability](https://mlsanity.com/paper/2606.07150/) (2026)
- [Pruned Traffic Trees: Native Semantic Compression with a Protocol-Structured Model Family for Encrypted Traffic Classification](https://mlsanity.com/paper/2608.21874/) (2026)
- [Neural-FacTOR: Neural Representation Learning for Website Fingerprinting Attack over TOR Anonymity](https://mlsanity.com/paper/2209.12482/) (2022)
- [Examining the Rat in the Tunnel: Interpretable Multi-Label Classification of Tor-based Malware](https://mlsanity.com/paper/2409.16639/) (2024)
- [Attack Smarter: Attention-Driven Fine-Grained Webpage Fingerprinting Attacks](https://mlsanity.com/paper/2506.20082/) (2025)
- [Beyond a Single Perspective: Towards a Realistic Evaluation of Website Fingerprinting Attacks](https://mlsanity.com/paper/2510.14283/) (2025)
- [Tracing the Chain: Deep Learning for Stepping-Stone Intrusion Detection](https://mlsanity.com/paper/2604.08800/) (2026)
- [GETA: Generalized Encrypted Traffic Analysis](https://mlsanity.com/paper/2605.31277/) (2026)
- [FlowAtom: Atom-Based Evidence Aggregation for Multi-Label Website Fingerprinting](https://mlsanity.com/paper/2609.29330/) (2026)

## Abstract (arXiv)

In recent years, there have been several works that use website fingerprinting techniques to enable a local adversary to determine which website a Tor user visits. While the current state-of-the-art attack, which uses deep learning, outperforms prior art with medium to large amounts of data, it attains marginal to no accuracy improvements when both use small amounts of training data. In this work, we propose Var-CNN, a website fingerprinting attack that leverages deep learning techniques along with novel insights specific to packet sequence classification. In open-world settings with large amounts of data, Var-CNN attains over 1% higher true positive rate (TPR) than state-of-the-art attacks while achieving 4× lower false positive rate (FPR). Var-CNN's improvements are especially notable in low-data scenarios, where it reduces the FPR of prior art by 3.12% while increasing the TPR by 13%. Overall, insights used to develop Var-CNN can be applied to future deep learning based attacks, and substantially reduce the amount of training data needed to perform a successful website fingerprinting attack. This shortens the time needed for data collection and lowers the likelihood of having data staleness issues.