Online Traffic Obfuscation Experimental Framework for the Smart Home Privacy Protection

Attackers can use Ethernet or WiFi sniffers to capture smart home device traffic and identify device events based on packet length and timing characteristics, thereby inferring users’ home behaviors. To address this issue, traffic obfuscation techniques have been extensively studied, with common methods including packet padding, packet segmentation, and fake traffic injection. However, existing research predominantly utilizes non-real-time traffic to verify whether traffic obfuscation techniques can effectively reduce the recognition rate of traffic analysis attacks on smart home devices. It often overlooks the potential impact of obfuscation operations on device connectivity and functional integrity in real network environments. To address this limitation, an online experimental framework for three fundamental traffic obfuscation techniques is proposed: packet padding, packet segmentation, and fake traffic injection. Experimental results demonstrate that the proposed framework maintains the continuous connectivity and functional integrity of smart home devices with a low system overhead, achieving an average CPU usage rate of less than 0.4% and an average memory occupancy rate of less than 2%. Evaluation results based on the random forest classification method show that the device event recognition accuracy for injected fake traffic exceeds 89%. In this context, a higher recognition accuracy indicates that attackers are more effectively deceived by the injected fake traffic. Conversely, the recognition accuracy for packet padding and packet segmentation methods is nearly zero, and a lower recognition accuracy in these cases implies a more effective implementation of those obfuscation techniques. Further evaluation results based on the deep learning classification method reveal that the packet segmentation approach significantly reduces device recognition accuracy for certain devices to below 5%, while simultaneously increasing the false recognition rate for other devices to over 95%. In contrast, fake traffic injection achieves a device recognition accuracy exceeding 90%. Moreover, the obfuscation effect of the packet padding method is found to be suboptimal, a finding consistent with existing literature suggesting that no single obfuscation technique can effectively withstand all types of traffic analysis attacks.