{"id":"https://openalex.org/W3109620927","doi":"https://doi.org/10.1145/3386367.3431311","title":"You do (not) belong here","display_name":"You do (not) belong here","publication_year":2020,"publication_date":"2020-11-23","ids":{"openalex":"https://openalex.org/W3109620927","doi":"https://doi.org/10.1145/3386367.3431311","mag":"3109620927"},"language":"en","primary_location":{"id":"doi:10.1145/3386367.3431311","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3386367.3431311","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on emerging Networking EXperiments and Technologies","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3386367.3431311","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5062977951","display_name":"Shitong Zhu","orcid":null},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Shitong Zhu","raw_affiliation_strings":["University of California, Riverside"],"affiliations":[{"raw_affiliation_string":"University of California, Riverside","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100376032","display_name":"Shasha Li","orcid":"https://orcid.org/0000-0003-2706-0399"},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shasha Li","raw_affiliation_strings":["University of California, Riverside"],"affiliations":[{"raw_affiliation_string":"University of California, Riverside","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100738315","display_name":"Zhongjie Wang","orcid":"https://orcid.org/0000-0002-9084-7373"},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhongjie Wang","raw_affiliation_strings":["University of California, Riverside"],"affiliations":[{"raw_affiliation_string":"University of California, Riverside","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104099863","display_name":"Xun Chen","orcid":"https://orcid.org/0009-0005-3679-7917"},"institutions":[{"id":"https://openalex.org/I4210101778","display_name":"Samsung (United States)","ror":"https://ror.org/01bfbvm65","country_code":"US","type":"company","lineage":["https://openalex.org/I2250650973","https://openalex.org/I4210101778"]},{"id":"https://openalex.org/I4210133173","display_name":"Research!America (United States)","ror":"https://ror.org/044pgyv50","country_code":"US","type":"company","lineage":["https://openalex.org/I4210133173"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xun Chen","raw_affiliation_strings":["Samsung Research America","Samsung Research America#TAB#"],"affiliations":[{"raw_affiliation_string":"Samsung Research America","institution_ids":["https://openalex.org/I4210101778","https://openalex.org/I4210133173"]},{"raw_affiliation_string":"Samsung Research America#TAB#","institution_ids":["https://openalex.org/I4210101778","https://openalex.org/I4210133173"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022038961","display_name":"Zhiyun Qian","orcid":"https://orcid.org/0000-0003-1506-2522"},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhiyun Qian","raw_affiliation_strings":["University of California, Riverside"],"affiliations":[{"raw_affiliation_string":"University of California, Riverside","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086268637","display_name":"Srikanth V. Krishnamurthy","orcid":"https://orcid.org/0000-0002-6533-4381"},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Srikanth V. Krishnamurthy","raw_affiliation_strings":["University of California, Riverside"],"affiliations":[{"raw_affiliation_string":"University of California, Riverside","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057402438","display_name":"Kevin Chan","orcid":"https://orcid.org/0000-0002-6425-5403"},"institutions":[{"id":"https://openalex.org/I166416128","display_name":"DEVCOM Army Research Laboratory","ror":"https://ror.org/011hc8f90","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I166416128","https://openalex.org/I2802705668","https://openalex.org/I4210154437"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kevin S. Chan","raw_affiliation_strings":["US Army Research Laboratory","US Army Research Laboratory ,"],"affiliations":[{"raw_affiliation_string":"US Army Research Laboratory","institution_ids":["https://openalex.org/I166416128"]},{"raw_affiliation_string":"US Army Research Laboratory ,","institution_ids":["https://openalex.org/I166416128"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103191815","display_name":"Ananthram Swami","orcid":"https://orcid.org/0000-0003-1439-332X"},"institutions":[{"id":"https://openalex.org/I166416128","display_name":"DEVCOM Army Research Laboratory","ror":"https://ror.org/011hc8f90","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I166416128","https://openalex.org/I2802705668","https://openalex.org/I4210154437"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ananthram Swami","raw_affiliation_strings":["US Army Research Laboratory","US Army Research Laboratory ,"],"affiliations":[{"raw_affiliation_string":"US Army Research Laboratory","institution_ids":["https://openalex.org/I166416128"]},{"raw_affiliation_string":"US Army Research Laboratory ,","institution_ids":["https://openalex.org/I166416128"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5062977951"],"corresponding_institution_ids":["https://openalex.org/I103635307"],"apc_list":null,"apc_paid":null,"fwci":0.7709,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.75163651,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"183","last_page":"197"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8092590570449829},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.7976307272911072},{"id":"https://openalex.org/keywords/header","display_name":"Header","score":0.7663240432739258},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.7527239918708801},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6659693717956543},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.6078206896781921},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5918253064155579},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5343133211135864},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3784104287624359},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.32022207975387573}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8092590570449829},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.7976307272911072},{"id":"https://openalex.org/C48105269","wikidata":"https://www.wikidata.org/wiki/Q1141160","display_name":"Header","level":2,"score":0.7663240432739258},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.7527239918708801},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6659693717956543},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.6078206896781921},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5918253064155579},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5343133211135864},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3784104287624359},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.32022207975387573},{"id":"https://openalex.org/C8891405","wikidata":"https://www.wikidata.org/wiki/Q1059","display_name":"Immune system","level":2,"score":0.0},{"id":"https://openalex.org/C203014093","wikidata":"https://www.wikidata.org/wiki/Q101929","display_name":"Immunology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3386367.3431311","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3386367.3431311","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on emerging Networking EXperiments and Technologies","raw_type":"proceedings-article"},{"id":"mag:3109620927","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"doi:10.1145/3386367.3431311","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3386367.3431311","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on emerging Networking EXperiments and Technologies","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.7699999809265137,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W1553177637","https://openalex.org/W2157331557","https://openalex.org/W2393727648","https://openalex.org/W2597331672","https://openalex.org/W2743138268","https://openalex.org/W2768553818","https://openalex.org/W2768562030","https://openalex.org/W2768904474","https://openalex.org/W2768945008","https://openalex.org/W2787957674","https://openalex.org/W2799215407","https://openalex.org/W2885239699","https://openalex.org/W2907492528","https://openalex.org/W2913843834","https://openalex.org/W2954476653","https://openalex.org/W2963938081","https://openalex.org/W2985708757","https://openalex.org/W3007237867","https://openalex.org/W4210257598","https://openalex.org/W4235381699"],"related_works":["https://openalex.org/W4061278","https://openalex.org/W11612074","https://openalex.org/W13203763","https://openalex.org/W10915603","https://openalex.org/W9878165","https://openalex.org/W1680855","https://openalex.org/W2849353","https://openalex.org/W4463790","https://openalex.org/W9834208","https://openalex.org/W2019302"],"abstract_inverted_index":{"As":[0],"Deep":[1],"Packet":[2],"Inspection":[3],"(DPI)":[4],"middleboxes":[5],"become":[6,77],"increasingly":[7],"popular,":[8],"a":[9,126,211],"spectrum":[10],"of":[11,19,24,51,185,192,200],"adversarial":[12],"attacks":[13,26,46,171],"have":[14],"emerged":[15],"with":[16,166],"the":[17,30,36,94,113,149,155,179],"goal":[18],"evading":[20],"such":[21],"middleboxes.":[22],"Many":[23],"these":[25,86],"exploit":[27],"discrepancies":[28],"between":[29],"middlebox":[31],"network":[32,65],"protocol":[33],"implementations,":[34],"and":[35,59,103,128,144,197],"more":[37],"rigorous/complete":[38],"versions":[39],"implemented":[40],"at":[41,57],"end":[42,60],"hosts.":[43],"These":[44,204],"evasion":[45,106,162,170,217],"largely":[47],"involve":[48],"subtle":[49],"manipulations":[50],"packets":[52,124,146],"to":[53,62,80,100],"cause":[54],"different":[55,123,130],"behaviours":[56],"DPI":[58,105,169,216],"hosts,":[61],"cloak":[63],"malicious":[64],"traffic":[66,138],"that":[67,147,157,173,207],"is":[68],"otherwise":[69],"detectable.":[70],"With":[71],"recent":[72],"automated":[73],"discovery,":[74],"it":[75],"has":[76],"prohibitively":[78],"challenging":[79],"manually":[81],"curate":[82],"rules":[83],"for":[84,161,214],"detecting":[85],"manipulations.":[87],"In":[88],"this":[89],"work,":[90],"we":[91,111],"propose":[92],"CLAP,":[93],"first":[95],"fully-automated,":[96],"unsupervised":[97],"ML":[98],"solution":[99],"accurately":[101],"detect":[102,143],"localize":[104],"attacks.":[107,218],"By":[108],"learning":[109],"what":[110],"call":[112],"packet":[114,151],"context,":[115],"which":[116],"essentially":[117],"captures":[118],"inter-relationships":[119],"across":[120],"both":[121],"(1)":[122],"in":[125,195,202],"connection;":[127],"(2)":[129],"header":[131],"fields":[132],"within":[133],"each":[134],"packet,":[135],"from":[136],"benign":[137,150],"traces":[139],"only,":[140],"CLAP":[141,174,208],"can":[142,209],"pinpoint":[145],"violate":[148],"contexts":[152],"(which":[153],"are":[154,158],"ones":[156],"specially":[159],"crafted":[160],"purposes).":[163],"Our":[164],"evaluations":[165],"73":[167],"state-of-the-art":[168],"show":[172],"achieves":[175],"an":[176,187,198],"Area":[177],"Under":[178],"Receiver":[180],"Operating":[181],"Characteristic":[182],"Curve":[183],"(AUCROC)":[184],"<u>0.963</u>,":[186],"Equal":[188],"Error":[189],"Rate":[190],"(EER)":[191],"only":[193],"<u>0.061</u>":[194],"detection,":[196],"accuracy":[199],"<u>94.6%</u>":[201],"localization.":[203],"results":[205],"suggest":[206],"be":[210],"promising":[212],"tool":[213],"thwarting":[215]},"counts_by_year":[{"year":2021,"cited_by_count":5}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}