DoQ+QUIC web traffic dataset

Moving away from plain-text DNS communications,users now have the option of using encrypted DNS protocolsfor domain name resolutions. DNS-over-QUIC (DoQ) employsQUIC—the latest transport protocol—for encrypted communi-cations between users and their recursive DNS servers. QUIC isalso poised to become the foundation of our daily web browsingexperience by replacing TCP with HTTPP/3, the latest versionof the HTTP protocol.Traditional TCP-based web browsing is vulnerable to websitefingerprinting (WFP) attacks that can identify the websites a uservisits. The emergence of QUIC-based DNS and HTTP protocolsraises an important question: are regular users better protectedfrom WFP attacks when using these new protocols?To investigate this, we first collect and publicly release thefirst benchmark dataset of network traffic corresponding to realvisits to QUIC-enabled websites while using DoQ for domainresolution. This dataset will help advance the research on WFPattacks and defenses. Second, we implement and evaluate thefirst WFP attack targeting the combined use of DoQ and HTTP/3protocols by users by developing two transformer models tailoredfor WFP attacks. Finally, we conduct comprehensive experiments,which reveal that these models are effective in identifying user-visited websites, emphasizing the need for defensive measures.