{"id":"https://openalex.org/W4386365376","doi":"https://doi.org/10.1145/3603269.3604875","title":"Global, Passive Detection of Connection Tampering","display_name":"Global, Passive Detection of Connection Tampering","publication_year":2023,"publication_date":"2023-09-01","ids":{"openalex":"https://openalex.org/W4386365376","doi":"https://doi.org/10.1145/3603269.3604875"},"language":"en","primary_location":{"id":"doi:10.1145/3603269.3604875","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3603269.3604875","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM SIGCOMM 2023 Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000158925","display_name":"Ram Sundara Raman","orcid":"https://orcid.org/0000-0002-2411-8463"},"institutions":[{"id":"https://openalex.org/I27837315","display_name":"University of Michigan","ror":"https://ror.org/00jmfr291","country_code":"US","type":"education","lineage":["https://openalex.org/I27837315"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ram Sundara Raman","raw_affiliation_strings":["Cloudflare, Inc., San Francisco, USA","University of Michigan, Ann Arbor, United States of America","University of Michigan, Ann Arbor, United States of America Cloudflare, Inc., San Francisco, USA"],"raw_orcid":"https://orcid.org/0000-0002-2411-8463","affiliations":[{"raw_affiliation_string":"Cloudflare, Inc., San Francisco, USA","institution_ids":[]},{"raw_affiliation_string":"University of Michigan, Ann Arbor, United States of America","institution_ids":["https://openalex.org/I27837315"]},{"raw_affiliation_string":"University of Michigan, Ann Arbor, United States of America Cloudflare, Inc., San Francisco, USA","institution_ids":["https://openalex.org/I27837315"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089204409","display_name":"Louis-Henri Merino","orcid":"https://orcid.org/0000-0003-0694-5489"},"institutions":[{"id":"https://openalex.org/I5124864","display_name":"\u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne","ror":"https://ror.org/02s376052","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I5124864"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Louis-Henri Merino","raw_affiliation_strings":["Decentralized and Distributed Systems Lab, EPFL, Lausanne, Switzerland"],"raw_orcid":"https://orcid.org/0000-0003-0694-5489","affiliations":[{"raw_affiliation_string":"Decentralized and Distributed Systems Lab, EPFL, Lausanne, Switzerland","institution_ids":["https://openalex.org/I5124864"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003684068","display_name":"Kevin Bock","orcid":"https://orcid.org/0000-0003-4415-6026"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kevin Bock","raw_affiliation_strings":["University of Maryland, College Park, United States of America"],"raw_orcid":"https://orcid.org/0000-0003-4415-6026","affiliations":[{"raw_affiliation_string":"University of Maryland, College Park, United States of America","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023321384","display_name":"Marwan Fayed","orcid":"https://orcid.org/0000-0002-0970-7972"},"institutions":[{"id":"https://openalex.org/I16835326","display_name":"University of St Andrews","ror":"https://ror.org/02wn5qz54","country_code":"GB","type":"education","lineage":["https://openalex.org/I16835326"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Marwan Fayed","raw_affiliation_strings":["Cloudflare Inc., London, United Kingdom","University of St Andrews, St Andrews, United Kingdom","Cloudflare Inc., London, United Kingdom University of St Andrews, St Andrews, United Kingdom"],"raw_orcid":"https://orcid.org/0000-0002-0970-7972","affiliations":[{"raw_affiliation_string":"Cloudflare Inc., London, United Kingdom","institution_ids":[]},{"raw_affiliation_string":"University of St Andrews, St Andrews, United Kingdom","institution_ids":["https://openalex.org/I16835326"]},{"raw_affiliation_string":"Cloudflare Inc., London, United Kingdom University of St Andrews, St Andrews, United Kingdom","institution_ids":["https://openalex.org/I16835326"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088579822","display_name":"Dave Levin","orcid":"https://orcid.org/0000-0003-4957-5131"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dave Levin","raw_affiliation_strings":["University of Maryland, College Park, United States of America"],"raw_orcid":"https://orcid.org/0000-0003-4957-5131","affiliations":[{"raw_affiliation_string":"University of Maryland, College Park, United States of America","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103253694","display_name":"Nick Sullivan","orcid":"https://orcid.org/0009-0003-0550-9228"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nick Sullivan","raw_affiliation_strings":["Cloudflare Inc., New York, United States of America"],"raw_orcid":"https://orcid.org/0009-0003-0550-9228","affiliations":[{"raw_affiliation_string":"Cloudflare Inc., New York, United States of America","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083843990","display_name":"Luke Valenta","orcid":"https://orcid.org/0000-0001-8936-0499"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Luke Valenta","raw_affiliation_strings":["Cloudflare Inc., San Francisco, USA"],"raw_orcid":"https://orcid.org/0000-0001-8936-0499","affiliations":[{"raw_affiliation_string":"Cloudflare Inc., San Francisco, USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.6003,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.86042644,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"622","last_page":"636"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7197184562683105},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7068362236022949},{"id":"https://openalex.org/keywords/transparency","display_name":"Transparency (behavior)","score":0.6573666334152222},{"id":"https://openalex.org/keywords/connection","display_name":"Connection (principal bundle)","score":0.6273977756500244},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.6195839047431946},{"id":"https://openalex.org/keywords/blocking","display_name":"Blocking (statistics)","score":0.6175484657287598},{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.5215573310852051},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4803527593612671},{"id":"https://openalex.org/keywords/censorship","display_name":"Censorship","score":0.4715288579463959},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.4393383264541626},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4305422306060791},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.28667429089546204},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.22550269961357117},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.10539552569389343},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.09943169355392456},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.0794588029384613}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7197184562683105},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7068362236022949},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.6573666334152222},{"id":"https://openalex.org/C13355873","wikidata":"https://www.wikidata.org/wiki/Q2920850","display_name":"Connection (principal bundle)","level":2,"score":0.6273977756500244},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.6195839047431946},{"id":"https://openalex.org/C144745244","wikidata":"https://www.wikidata.org/wiki/Q4927286","display_name":"Blocking (statistics)","level":2,"score":0.6175484657287598},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.5215573310852051},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4803527593612671},{"id":"https://openalex.org/C52930066","wikidata":"https://www.wikidata.org/wiki/Q543","display_name":"Censorship","level":2,"score":0.4715288579463959},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4393383264541626},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4305422306060791},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.28667429089546204},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.22550269961357117},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.10539552569389343},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.09943169355392456},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0794588029384613},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C66938386","wikidata":"https://www.wikidata.org/wiki/Q633538","display_name":"Structural engineering","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3603269.3604875","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3603269.3604875","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM SIGCOMM 2023 Conference","raw_type":"proceedings-article"},{"id":"pmh:oai:infoscience.epfl.ch:308499","is_oa":false,"landing_page_url":"http://infoscience.epfl.ch/record/308499","pdf_url":null,"source":{"id":"https://openalex.org/S4306400488","display_name":"Infoscience (Ecole Polytechnique F\u00e9d\u00e9rale de Lausanne)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://infoscience.epfl.ch/record/308499","raw_type":"Text"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7799999713897705,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G4064231573","display_name":null,"funder_award_id":"CNS-1943240","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":56,"referenced_works":["https://openalex.org/W25350463","https://openalex.org/W287961753","https://openalex.org/W1520405326","https://openalex.org/W1899760619","https://openalex.org/W1968355613","https://openalex.org/W2005625871","https://openalex.org/W2114398364","https://openalex.org/W2292723020","https://openalex.org/W2400899155","https://openalex.org/W2408164229","https://openalex.org/W2506529408","https://openalex.org/W2523421704","https://openalex.org/W2608201337","https://openalex.org/W2610175430","https://openalex.org/W2623393283","https://openalex.org/W2706122055","https://openalex.org/W2751902902","https://openalex.org/W2768945008","https://openalex.org/W2793301585","https://openalex.org/W2796214649","https://openalex.org/W2883465951","https://openalex.org/W2889384587","https://openalex.org/W2904027722","https://openalex.org/W2951077744","https://openalex.org/W2952644637","https://openalex.org/W2960535144","https://openalex.org/W2961732833","https://openalex.org/W2972532057","https://openalex.org/W2973651894","https://openalex.org/W3007224029","https://openalex.org/W3007237867","https://openalex.org/W3046608336","https://openalex.org/W3046995597","https://openalex.org/W3048537417","https://openalex.org/W3093849846","https://openalex.org/W3110509121","https://openalex.org/W3158854488","https://openalex.org/W3169693484","https://openalex.org/W3170802455","https://openalex.org/W3178313732","https://openalex.org/W3193761190","https://openalex.org/W3207305153","https://openalex.org/W4235381699","https://openalex.org/W4299301436","https://openalex.org/W4307020332","https://openalex.org/W4311118474","https://openalex.org/W4365440982","https://openalex.org/W6632025212","https://openalex.org/W6653033421","https://openalex.org/W6676556160","https://openalex.org/W6682619859","https://openalex.org/W6686565904","https://openalex.org/W6694703376","https://openalex.org/W6744137356","https://openalex.org/W6774360920","https://openalex.org/W6863951927"],"related_works":["https://openalex.org/W2149202530","https://openalex.org/W2807822918","https://openalex.org/W2921723332","https://openalex.org/W2482950156","https://openalex.org/W4396966040","https://openalex.org/W2048123072","https://openalex.org/W2305322260","https://openalex.org/W3139248031","https://openalex.org/W3042334625","https://openalex.org/W4200017362"],"abstract_inverted_index":{"In-network":[0],"devices":[1],"around":[2],"the":[3,97,102,116],"world":[4],"monitor":[5],"and":[6,20,35,48,65],"tamper":[7],"with":[8,42,57],"connections":[9],"for":[10],"many":[11],"reasons,":[12],"including":[13],"intrusion":[14],"prevention,":[15],"combating":[16],"spam":[17],"or":[18,33,59],"phishing,":[19],"country-level":[21],"censorship.":[22],"Connection":[23],"tampering":[24,85],"seeks":[25],"to":[26,29,62,81,92],"block":[27],"access":[28],"specific":[30],"domain":[31],"names":[32],"keywords,":[34],"it":[36],"affects":[37],"billions":[38],"of":[39,73,96,104],"users":[40,122],"worldwide":[41],"little-to-no":[43],"transparency.":[44],"To":[45],"detect,":[46],"diagnose,":[47],"measure":[49],"connection-level":[50],"blocking,":[51],"\"active\"":[52],"measurement":[53,76],"techniques":[54],"originate":[55],"queries":[56],"domains":[58,105],"keywords":[60],"believed":[61],"be":[63],"blocked":[64],"send":[66],"them":[67],"from":[68],"vantage":[69],"points":[70],"within":[71],"networks":[72],"interest.":[74],"Active":[75],"efforts":[77],"have":[78],"been":[79],"critical":[80,94],"understanding":[82],"how":[83],"traffic":[84],"occurs,":[86],"but":[87],"they":[88],"inherently":[89],"are":[90,123],"unable":[91],"capture":[93],"parts":[95],"picture.":[98],"For":[99],"instance,":[100],"knowing":[101,119],"set":[103],"in":[106],"a":[107],"block-list":[108],"(i.e.,":[109,126],"what":[110,120,127],"could":[111],"get":[112],"blocked)":[113],"is":[114,128],"not":[115],"same":[117],"as":[118],"real":[121],"actively":[124,129],"experiencing":[125],"getting":[130],"blocked).":[131]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":8}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}