A Large-Scale Benchmark and Risk Assessment of Traffic Analysis Attacks on Cloud LLM Services

arXiv:2609.31877 · cs.CR, cs.AI, cs.LG · Submitted 2026-09-25 · Read on arXiv

cs.CR, cs.AI, cs.LG

Submitted: 2026-09-25

Updated: 2026-09-25

Code: https://github.com/IQSeC-Lab/AI-Traffic-Analysis

Terminology

• Fingerprinting — 68× in this paper · explained in 2 episodes
• Accuracy — 54× in this paper · explained in 1 episode
• Trace — 24× in this paper · explained in 2 episodes
• Benchmark — 23× in this paper · explained in 2 episodes
• Multi-Agent System — 5× in this paper · explained in 6 episodes
• Computer and Communications Security — 4× in this paper
• Feature Extraction — 4× in this paper · explained in 2 episodes
• Robustness — 3× in this paper · explained in 5 episodes
• Tokenization — 3× in this paper · explained in 2 episodes
• Agent Interactions — 2× in this paper · explained in 1 episode
• Core — 2× in this paper · explained in 2 episodes
• F1 Score — 2× in this paper · explained in 3 episodes
• Information Leakage — 2× in this paper · explained in 2 episodes
• Adaptation — 1× in this paper · explained in 1 episode
• Agentic System — 1× in this paper · explained in 2 episodes
• Alignment — 1× in this paper · explained in 1 episode
• Feature Selection — 1× in this paper · explained in 4 episodes
• Large Language Model (LLM) — 1× in this paper · explained in 3 episodes
• Large Language Models (LLMs) — 1× in this paper · explained in 6 episodes
• Wasserstein Distance — 1× in this paper · explained in 4 episodes

Sources

• LLMs Have Rhythm: Fingerprinting Large Language Models Using Inter-Token Times and Network Traffic Analysis
• Remote Timing Attacks on Efficient Language Model Inference
• Whisper Leak: a side-channel attack on Large Language Models
• Exposing LLM User Privacy via Traffic Fingerprint Analysis: A Study of Privacy Risks in LLM Agent Interactions
• A Measurement of Genuine Tor Traces for Realistic Website Fingerprinting
• Holistic Evaluation of Language Models
• Measuring Massive Multitask Language Understanding
• RouterBench: A Benchmark for Multi-LLM Routing System
• LLMRouterBench: A Massive Benchmark and Unified Framework for LLM Routing
• NetEcho: From Real-World Streaming Side-Channels to Full LLM Conversation Recovery
• PersonaFingerprint: Measuring Persona Inference on Modern Websites with LLM-Driven Browsing
• TeamBench: Evaluating Agent Coordination under Enforced Role Separation
• DeepResearch Bench: A Comprehensive Benchmark for Deep Research Agents

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs