{"id":"https://openalex.org/W7125631664","doi":"https://doi.org/10.56553/popets-2026-0013","title":"What-App? App Usage Detection Using Encrypted LTE/5G Traffic","display_name":"What-App? App Usage Detection Using Encrypted LTE/5G Traffic","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7125631664","doi":"https://doi.org/10.56553/popets-2026-0013"},"language":"en","primary_location":{"id":"doi:10.56553/popets-2026-0013","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2026-0013","pdf_url":"https://petsymposium.org/popets/2026/popets-2026-0013.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://petsymposium.org/popets/2026/popets-2026-0013.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5123814840","display_name":"Jinjin Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I79619799","display_name":"University of Birmingham","ror":"https://ror.org/03angcq70","country_code":"GB","type":"education","lineage":["https://openalex.org/I79619799"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Jinjin Wang","raw_affiliation_strings":["University of Birmingham"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Birmingham","institution_ids":["https://openalex.org/I79619799"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051336176","display_name":"Zishuai Cheng","orcid":"https://orcid.org/0000-0002-9740-0654"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zishuai Cheng","raw_affiliation_strings":["Beijing University of Posts and Telecommunications"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123798119","display_name":"Mihai Ordean","orcid":null},"institutions":[{"id":"https://openalex.org/I79619799","display_name":"University of Birmingham","ror":"https://ror.org/03angcq70","country_code":"GB","type":"education","lineage":["https://openalex.org/I79619799"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Mihai Ordean","raw_affiliation_strings":["University of Birmingham"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Birmingham","institution_ids":["https://openalex.org/I79619799"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5123799948","display_name":"Baojiang Cui","orcid":null},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Baojiang Cui","raw_affiliation_strings":["Beijing University of Posts and Telecommunications"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications","institution_ids":["https://openalex.org/I139759216"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5123814840"],"corresponding_institution_ids":["https://openalex.org/I79619799"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.12166574,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2026","issue":"1","first_page":"242","last_page":"256"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.2989000082015991,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.2989000082015991,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.1923999935388565,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.14010000228881836,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.6858000159263611},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.6718000173568726},{"id":"https://openalex.org/keywords/relay","display_name":"Relay","score":0.4666999876499176},{"id":"https://openalex.org/keywords/latency","display_name":"Latency (audio)","score":0.45669999718666077},{"id":"https://openalex.org/keywords/traffic-analysis","display_name":"Traffic analysis","score":0.44839999079704285},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.44279998540878296},{"id":"https://openalex.org/keywords/wireless","display_name":"Wireless","score":0.4345000088214874},{"id":"https://openalex.org/keywords/application-layer","display_name":"Application layer","score":0.3386000096797943}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.777899980545044},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6858000159263611},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.6718000173568726},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.6219000220298767},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4819999933242798},{"id":"https://openalex.org/C2778156585","wikidata":"https://www.wikidata.org/wiki/Q174053","display_name":"Relay","level":3,"score":0.4666999876499176},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.45669999718666077},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.44839999079704285},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.44279998540878296},{"id":"https://openalex.org/C555944384","wikidata":"https://www.wikidata.org/wiki/Q249","display_name":"Wireless","level":2,"score":0.4345000088214874},{"id":"https://openalex.org/C190793597","wikidata":"https://www.wikidata.org/wiki/Q189768","display_name":"Application layer","level":3,"score":0.3386000096797943},{"id":"https://openalex.org/C2776257435","wikidata":"https://www.wikidata.org/wiki/Q1576430","display_name":"Bandwidth (computing)","level":2,"score":0.3352999985218048},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.3310000002384186},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.3296000063419342},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3149999976158142},{"id":"https://openalex.org/C46637626","wikidata":"https://www.wikidata.org/wiki/Q6693015","display_name":"Low latency (capital markets)","level":2,"score":0.2930000126361847},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2883000075817108},{"id":"https://openalex.org/C204673680","wikidata":"https://www.wikidata.org/wiki/Q1628107","display_name":"Airfield traffic pattern","level":2,"score":0.27079999446868896},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.2660999894142151},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.25760000944137573},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2535000145435333}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.56553/popets-2026-0013","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2026-0013","pdf_url":"https://petsymposium.org/popets/2026/popets-2026-0013.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},{"id":"pmh:oai:pure.atira.dk:openaire/ff68ec06-b0a3-4805-995c-68f69e868575","is_oa":true,"landing_page_url":"https://research.birmingham.ac.uk/en/publications/ff68ec06-b0a3-4805-995c-68f69e868575","pdf_url":"https://pure-oai.bham.ac.uk/ws/files/291838458/WangJ2026Whatapp.pdf","source":{"id":"https://openalex.org/S4306402634","display_name":"University of Birmingham Research Portal (University of Birmingham)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79619799","host_organization_name":"University of Birmingham","host_organization_lineage":["https://openalex.org/I79619799"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Wang, J, Cheng, Z, Ordean, M & Cui, B 2026, 'What-App? App Usage Detection Using Encrypted LTE/5G Traffic', Proceedings on Privacy Enhancing Technologies, vol. 2026, no. 1, pp. 242-256. https://doi.org/10.56553/popets-2026-0013","raw_type":"info:eu-repo/semantics/publishedVersion"}],"best_oa_location":{"id":"doi:10.56553/popets-2026-0013","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2026-0013","pdf_url":"https://petsymposium.org/popets/2026/popets-2026-0013.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.8272061347961426,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7125631664.pdf","grobid_xml":"https://content.openalex.org/works/W7125631664.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Cellular":[0],"traffic":[1,76,151,178,189],"fingerprinting":[2,77],"attacks,":[3],"in":[4,84,169],"which":[5],"an":[6,85,201],"unprivileged":[7],"adversary":[8,98],"passively":[9],"monitors":[10],"encrypted":[11],"wireless":[12],"channels":[13],"to":[14,27,99,105,134,181],"infer":[15,31,135],"user":[16,29,101,125,137],"activities,":[17,33],"introduce":[18],"significant":[19],"privacy":[20],"risks":[21],"by":[22],"giving":[23],"attackers":[24],"the":[25,62,73,132,182,209],"ability":[26,133],"track":[28],"behaviors,":[30],"sensitive":[32],"and":[34,47,143,153,162,165,224],"profile":[35],"victims":[36],"without":[37],"authorization.":[38],"Although":[39],"such":[40,139,221],"attacks":[41],"have":[42],"been":[43],"discussed":[44],"for":[45,194],"LTE":[46],"5G,":[48],"many":[49],"existing":[50,210],"studies":[51],"rely":[52],"on":[53,122],"idealized":[54],"assumptions":[55],"that":[56],"fall":[57],"short":[58],"when":[59],"faced":[60],"with":[61,90,103,218],"complexities":[63],"of":[64,176],"real-world":[65],"practical":[66,75,147,219],"scenarios.":[67],"In":[68],"this":[69],"paper,":[70],"we":[71],"present":[72],"first":[74],"attack":[78,94,158],"leveraging":[79],"a":[80,96,174,187],"Man-in-the-Middle":[81],"(MITM)":[82],"Relay":[83],"operational":[86],"cellular":[87,195,211],"network.":[88],"Implemented":[89],"open-source":[91],"software,":[92],"our":[93,114],"allows":[95],"passive":[97],"identify":[100],"applications":[102,118],"up":[104],"99.02%":[106],"accuracy,":[107],"even":[108],"under":[109,146],"noisy":[110],"conditions.":[111],"We":[112,184],"evaluate":[113],"method":[115],"using":[116],"40":[117],"across":[119],"five":[120],"categories":[121],"multiple":[123],"COTS":[124],"equipment":[126],"(UE).":[127],"Our":[128],"approach":[129],"further":[130],"demonstrates":[131],"fine-grained":[136],"activities":[138],"as":[140,200,222],"browsing,":[141],"messaging,":[142],"video":[144],"streaming":[145],"constraints,":[148],"including":[149],"partial":[150],"knowledge":[152],"app":[154],"version":[155],"drift.":[156],"The":[157],"also":[159],"achieves":[160],"cross-device":[161],"cross-network":[163],"transferability,":[164],"it":[166],"remains":[167],"robust":[168],"open-world":[170],"scenarios":[171],"where":[172],"only":[173],"subset":[175],"application":[177],"is":[179],"known":[180],"adversary.":[183],"additionally":[185],"propose":[186],"novel":[188],"regularization-based":[190],"defense":[191,198],"tailored":[192],"specifically":[193],"networks.":[196],"This":[197],"operates":[199],"optional,":[202],"backward-compatible":[203],"security":[204,216],"layer":[205],"integrated":[206],"seamlessly":[207],"into":[208],"protocol":[212],"stack,":[213],"effectively":[214],"balancing":[215],"strength":[217],"considerations":[220],"latency":[223],"bandwidth":[225],"overhead.":[226]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2026-01-26T00:00:00"}