{"id":"https://openalex.org/W7162576332","doi":"https://doi.org/10.1109/menacomm69507.2026.11532833","title":"BlindGate: A Gateway Architecture for Practical Privacy-Preserving Deep Packet Inspection on Encrypted Traffic","display_name":"BlindGate: A Gateway Architecture for Practical Privacy-Preserving Deep Packet Inspection on Encrypted Traffic","publication_year":2026,"publication_date":"2026-05-12","ids":{"openalex":"https://openalex.org/W7162576332","doi":"https://doi.org/10.1109/menacomm69507.2026.11532833"},"language":null,"primary_location":{"id":"doi:10.1109/menacomm69507.2026.11532833","is_oa":false,"landing_page_url":"https://doi.org/10.1109/menacomm69507.2026.11532833","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 6th Middle East and North Africa Communications Conference (MENACOMM)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137118017","display_name":"Evan Gunawan","orcid":null},"institutions":[{"id":"https://openalex.org/I166073570","display_name":"Binus University","ror":"https://ror.org/03zmf4s77","country_code":"ID","type":"education","lineage":["https://openalex.org/I166073570"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Evan Gunawan","raw_affiliation_strings":["School of Computer Science, Bina Nusantara University,Cyber Security Program,Computer Science Department,Jakarta,Indonesia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, Bina Nusantara University,Cyber Security Program,Computer Science Department,Jakarta,Indonesia","institution_ids":["https://openalex.org/I166073570"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5137092310","display_name":"Yohan Muliono","orcid":null},"institutions":[{"id":"https://openalex.org/I166073570","display_name":"Binus University","ror":"https://ror.org/03zmf4s77","country_code":"ID","type":"education","lineage":["https://openalex.org/I166073570"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Yohan Muliono","raw_affiliation_strings":["School of Computer Science, Bina Nusantara University,Cyber Security Program,Computer Science Department,Jakarta,Indonesia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, Bina Nusantara University,Cyber Security Program,Computer Science Department,Jakarta,Indonesia","institution_ids":["https://openalex.org/I166073570"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.85514177,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.8730000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.8730000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.07779999822378159,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.02410000003874302,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5910000205039978},{"id":"https://openalex.org/keywords/gateway","display_name":"Gateway (web page)","score":0.5577999949455261},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5163999795913696},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.4413999915122986},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.4138000011444092},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.33629998564720154},{"id":"https://openalex.org/keywords/systems-architecture","display_name":"Systems architecture","score":0.30790001153945923}],"concepts":[{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.6290000081062317},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6098999977111816},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5910000205039978},{"id":"https://openalex.org/C2777710495","wikidata":"https://www.wikidata.org/wiki/Q5527195","display_name":"Gateway (web page)","level":2,"score":0.5577999949455261},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5163999795913696},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.4413999915122986},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.4138000011444092},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.33629998564720154},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3199000060558319},{"id":"https://openalex.org/C98025372","wikidata":"https://www.wikidata.org/wiki/Q477538","display_name":"Systems architecture","level":3,"score":0.30790001153945923},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3001999855041504},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2985999882221222},{"id":"https://openalex.org/C2780405328","wikidata":"https://www.wikidata.org/wiki/Q1067099","display_name":"Internetworking","level":3,"score":0.29809999465942383},{"id":"https://openalex.org/C113508815","wikidata":"https://www.wikidata.org/wiki/Q193446","display_name":"Packet switching","level":3,"score":0.28299999237060547},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2761000096797943},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.26820001006126404},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.2623000144958496},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2603999972343445},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.25850000977516174},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.250900000333786}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/menacomm69507.2026.11532833","is_oa":false,"landing_page_url":"https://doi.org/10.1109/menacomm69507.2026.11532833","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 6th Middle East and North Africa Communications Conference (MENACOMM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W1516506771","https://openalex.org/W2056494114","https://openalex.org/W2062805799","https://openalex.org/W2101571537","https://openalex.org/W2106217851","https://openalex.org/W2147929033","https://openalex.org/W2603792932","https://openalex.org/W2612544399","https://openalex.org/W2613715541","https://openalex.org/W2785474195","https://openalex.org/W2915352631","https://openalex.org/W4293221992"],"related_works":[],"abstract_inverted_index":{"The":[0],"widespread":[1],"adoption":[2],"of":[3,9,171,186,201],"TLS":[4,129],"has":[5],"reduced":[6],"the":[7,139,168,172,199],"effectiveness":[8],"traditional":[10],"deep":[11],"packet":[12],"inspection":[13,72,208],"(DPI)":[14],"by":[15],"encrypting":[16],"application":[17],"payloads,":[18],"forcing":[19],"enterprises":[20],"to":[21,68,99,193],"choose":[22],"between":[23],"visibility":[24],"and":[25,46,80,89,95,154,209],"privacy.":[26],"Prior":[27],"work":[28],"such":[29],"as":[30,123],"BlindBox":[31],"demonstrates":[32],"that":[33,63,138,177],"searchable":[34],"encryption":[35,83],"can":[36,141],"enable":[37,69],"DPI":[38,217],"over":[39],"encrypted":[40,92,143,148,160,178],"content,":[41],"but":[42],"requires":[43],"endpoint":[44],"participation":[45],"a":[47,60,85,124,134,211],"modified":[48],"protocol":[49],"stack,":[50],"limiting":[51],"deployability":[52],"in":[53,218],"enterprise":[54,220],"environments.":[55],"This":[56],"paper":[57],"presents":[58],"BlindGate,":[59],"gateway-based":[61],"architecture":[62],"adapts":[64],"BlindBox-inspired":[65],"token":[66,82,93,145,149,161],"matching":[67],"practical,":[70],"privacy-preserving":[71,216],"with":[73],"minimal":[74,96],"client-side":[75],"modification.":[76],"BlindGate":[77],"centralizes":[78],"tokenization":[79,179],"deterministic":[81],"within":[84,167],"trusted":[86,169],"network":[87],"gateway,":[88],"exports":[90],"only":[91],"representations":[94],"flow":[97],"metadata":[98],"an":[100,114,181],"untrusted":[101],"detection":[102],"engine":[103],"for":[104,206,215],"tokenized":[105],"rule":[106,144],"matching.":[107],"A":[108],"proof-of-concept":[109],"prototype":[110],"is":[111,121],"implemented":[112],"using":[113],"HTTP":[115],"traffic":[116],"instantiation":[117],"while":[118,163],"HTTPS":[119],"support":[120],"treated":[122],"deployment":[125,213],"extension":[126],"via":[127],"gateway-side":[128],"termination.":[130],"Experimental":[131,174],"results":[132,197],"from":[133,151],"multi-VM":[135],"testbed":[136],"show":[137],"Custom-IDS":[140],"load":[142],"sets,":[146],"receive":[147],"batches":[150],"live":[152],"traffic,":[153],"generate":[155],"alerts":[156],"based":[157],"solely":[158],"on":[159],"intersections":[162],"plaintext":[164],"remains":[165],"confined":[166],"boundary":[170],"gateway.":[173],"evaluation":[175],"shows":[176],"introduces":[180],"average":[182],"gateway":[183],"processing":[184],"overhead":[185],"approximately":[187],"13":[188],"ms":[189],"per":[190],"request":[191],"compared":[192],"baseline":[194],"forwarding.":[195],"These":[196],"demonstrate":[198],"feasibility":[200],"enforcing":[202],"strict":[203],"trust":[204],"boundaries":[205],"content-aware":[207],"provide":[210],"practical":[212],"path":[214],"managed":[219],"networks.":[221]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-05-28T00:00:00"}