{"id":"https://openalex.org/W4417508628","doi":"https://doi.org/10.1109/tnsm.2025.3646259","title":"Online Traffic Camouflage Against Network Analyzers via Deep Reinforcement Learning","display_name":"Online Traffic Camouflage Against Network Analyzers via Deep Reinforcement Learning","publication_year":2025,"publication_date":"2025-12-19","ids":{"openalex":"https://openalex.org/W4417508628","doi":"https://doi.org/10.1109/tnsm.2025.3646259"},"language":null,"primary_location":{"id":"doi:10.1109/tnsm.2025.3646259","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2025.3646259","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100362635","display_name":"Wenhao Li","orcid":"https://orcid.org/0000-0003-2268-7416"},"institutions":[{"id":"https://openalex.org/I4210136246","display_name":"China Telecom (China)","ror":"https://ror.org/03jgnzt20","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210136246"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Wenhao Li","raw_affiliation_strings":["Cloud Network Security Laboratory, China Telecom Research Institute Guangzhou, Guangzhou, China"],"affiliations":[{"raw_affiliation_string":"Cloud Network Security Laboratory, China Telecom Research Institute Guangzhou, Guangzhou, China","institution_ids":["https://openalex.org/I4210136246"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103200754","display_name":"Jie Chen","orcid":"https://orcid.org/0000-0003-4887-4244"},"institutions":[{"id":"https://openalex.org/I4210136246","display_name":"China Telecom (China)","ror":"https://ror.org/03jgnzt20","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210136246"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jie Chen","raw_affiliation_strings":["Cloud Network Security Laboratory, China Telecom Research Institute Guangzhou, Guangzhou, China"],"affiliations":[{"raw_affiliation_string":"Cloud Network Security Laboratory, China Telecom Research Institute Guangzhou, Guangzhou, China","institution_ids":["https://openalex.org/I4210136246"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022409306","display_name":"Zhaoxuan Li","orcid":"https://orcid.org/0000-0002-2195-0799"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhaoxuan Li","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114022603","display_name":"Shuai Wang","orcid":"https://orcid.org/0009-0005-7117-1055"},"institutions":[{"id":"https://openalex.org/I4210136246","display_name":"China Telecom (China)","ror":"https://ror.org/03jgnzt20","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210136246"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuai Wang","raw_affiliation_strings":["Cloud Network Security Laboratory, China Telecom Research Institute Guangzhou, Guangzhou, China"],"affiliations":[{"raw_affiliation_string":"Cloud Network Security Laboratory, China Telecom Research Institute Guangzhou, Guangzhou, China","institution_ids":["https://openalex.org/I4210136246"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100966413","display_name":"Huamin Jin","orcid":null},"institutions":[{"id":"https://openalex.org/I4210136246","display_name":"China Telecom (China)","ror":"https://ror.org/03jgnzt20","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210136246"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Huamin Jin","raw_affiliation_strings":["Cloud Network Security Laboratory, China Telecom Research Institute Guangzhou, Guangzhou, China"],"affiliations":[{"raw_affiliation_string":"Cloud Network Security Laboratory, China Telecom Research Institute Guangzhou, Guangzhou, China","institution_ids":["https://openalex.org/I4210136246"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100419434","display_name":"Xiaoyu Zhang","orcid":"https://orcid.org/0000-0003-1630-6058"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiao-Yu Zhang","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5100362635"],"corresponding_institution_ids":["https://openalex.org/I4210136246"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.22859781,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":null,"first_page":"1927","last_page":"1941"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9664999842643738,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9664999842643738,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.019500000402331352,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.002099999925121665,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.8125},{"id":"https://openalex.org/keywords/camouflage","display_name":"Camouflage","score":0.6256999969482422},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5031999945640564},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.4846999943256378},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.4846999943256378},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4641000032424927},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4611999988555908},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.42239999771118164},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.4172999858856201}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8730000257492065},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.8125},{"id":"https://openalex.org/C2776196576","wikidata":"https://www.wikidata.org/wiki/Q196113","display_name":"Camouflage","level":2,"score":0.6256999969482422},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5088000297546387},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5031999945640564},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.4846999943256378},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.4846999943256378},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4641000032424927},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4611999988555908},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.42239999771118164},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.4172999858856201},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.41499999165534973},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.41190001368522644},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3921999931335449},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.37439998984336853},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.33959999680519104},{"id":"https://openalex.org/C761482","wikidata":"https://www.wikidata.org/wiki/Q118093","display_name":"Transmission (telecommunications)","level":2,"score":0.3368000090122223},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.32839998602867126},{"id":"https://openalex.org/C95466800","wikidata":"https://www.wikidata.org/wiki/Q1027298","display_name":"Quantum key distribution","level":3,"score":0.3176000118255615},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.3156000077724457},{"id":"https://openalex.org/C176715033","wikidata":"https://www.wikidata.org/wiki/Q2080768","display_name":"Traffic generation model","level":2,"score":0.30140000581741333},{"id":"https://openalex.org/C46451311","wikidata":"https://www.wikidata.org/wiki/Q262550","display_name":"Traffic shaping","level":4,"score":0.2867000102996826},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2797999978065491},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.2782999873161316},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.27059999108314514},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.2694999873638153},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.2680000066757202},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.25699999928474426},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.2531999945640564}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2025.3646259","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2025.3646259","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":44,"referenced_works":["https://openalex.org/W2051000513","https://openalex.org/W2161251616","https://openalex.org/W2295598076","https://openalex.org/W2485000773","https://openalex.org/W2534437878","https://openalex.org/W2599600800","https://openalex.org/W2606697812","https://openalex.org/W2772303842","https://openalex.org/W2892460540","https://openalex.org/W2911301616","https://openalex.org/W2915004662","https://openalex.org/W2919493784","https://openalex.org/W2990225485","https://openalex.org/W3006102800","https://openalex.org/W3007562398","https://openalex.org/W3012981875","https://openalex.org/W3021740526","https://openalex.org/W3035950449","https://openalex.org/W3109491787","https://openalex.org/W3111088413","https://openalex.org/W3155427574","https://openalex.org/W3165205057","https://openalex.org/W3198213289","https://openalex.org/W3201205071","https://openalex.org/W3211002588","https://openalex.org/W3212981375","https://openalex.org/W4200594565","https://openalex.org/W4285171541","https://openalex.org/W4285209606","https://openalex.org/W4296893596","https://openalex.org/W4312401453","https://openalex.org/W4361733520","https://openalex.org/W4366147360","https://openalex.org/W4367046757","https://openalex.org/W4367046987","https://openalex.org/W4389328382","https://openalex.org/W4401537668","https://openalex.org/W4402469197","https://openalex.org/W4403914904","https://openalex.org/W4405109490","https://openalex.org/W4405183220","https://openalex.org/W4405593200","https://openalex.org/W4411086510","https://openalex.org/W4412129353"],"related_works":[],"abstract_inverted_index":{"Traffic":[0],"analysis":[1],"plays":[2],"a":[3,82,93,139,161,205],"pivotal":[4],"role":[5],"in":[6,62,175,179,227],"network":[7,105,210,231],"management.":[8],"However,":[9],"despite":[10],"the":[11,53,121,152,158,171,192,228],"prevalence":[12],"of":[13,116,173,195,230],"encryption,":[14],"attackers":[15],"are":[16,49],"still":[17],"able":[18],"to":[19,45,71,87,99,151],"deduce":[20],"privacy":[21,212],"elements":[22],"such":[23],"as":[24],"user":[25],"behavior":[26],"and":[27,95,182,199,225],"OS":[28],"identification":[29],"through":[30,75],"advanced":[31],"learning-based":[32],"methods":[33],"that":[34],"exploit":[35],"side-channel":[36],"features.":[37],"Existing":[38],"defense":[39,187],"strategies,":[40],"which":[41],"manipulate":[42],"feature":[43,68,148],"distribution":[44,69,159],"evade":[46],"traffic":[47,106,153,202,211],"analyzers,":[48],"often":[50],"hampered":[51],"by":[52],"need":[54],"for":[55,126,209],"impractical":[56,196],"decoder":[57,197],"deployment":[58,111,128,198],"across":[59],"all":[60],"routes":[61],"symmetric":[63],"framework":[64],"methods.":[65],"Moreover,":[66],"reversing":[67],"modifications":[70],"real-time":[72,201],"traffic,":[73],"especially":[74],"dummy":[76],"packet":[77],"crafting":[78],"or":[79],"padding,":[80],"is":[81,114,217],"complex":[83,200],"task.":[84],"In":[85],"response":[86],"these":[88],"challenges,":[89],"we":[90],"propose":[91],"Veil,":[92],"novel":[94],"practical":[96],"defender":[97],"designed":[98],"protect":[100],"live":[101,118],"connections":[102],"against":[103],"encrypted":[104],"analyzers.":[107],"Leveraging":[108],"an":[109],"asymmetric":[110],"structure,":[112],"Veil":[113,143,174,190],"capable":[115],"reconstructing":[117],"streams":[119],"at":[120,220],"packet-block":[122],"level,":[123],"thereby":[124],"allowing":[125],"seamless":[127],"on":[129,167],"any":[130],"connection":[131],"node":[132],"while":[133],"enforcing":[134],"transmission":[135],"constraints.":[136],"By":[137],"employing":[138],"traffic-customized":[140],"DQN":[141],"framework,":[142],"not":[144],"only":[145],"reverses":[146],"statistical":[147],"perturbations":[149],"back":[150],"space":[154],"but":[155],"also":[156],"directs":[157],"towards":[160],"target":[162],"class.":[163],"Extensive":[164],"experiments":[165],"conducted":[166],"real-world":[168],"datasets":[169],"validate":[170],"efficacy":[172],"efficiently":[176],"evading":[177],"analyzers":[178],"both":[180],"targeted":[181],"untargeted":[183],"modes,":[184],"outperforming":[185],"existing":[186],"mechanisms.":[188],"Notably,":[189],"addresses":[191],"key":[193],"issues":[194],"manipulation,":[203],"offering":[204],"more":[206],"viable":[207],"solution":[208],"protection.":[213],"The":[214],"source":[215],"code":[216],"publicly":[218],"available":[219],"https://github.com/SecTeamPolaris/Veil,":[221],"facilitating":[222],"further":[223],"research":[224],"application":[226],"field":[229],"security.":[232]},"counts_by_year":[],"updated_date":"2026-03-07T16:01:11.037858","created_date":"2025-12-19T00:00:00"}