Traffic classification, ie the inference of applications and/or services from their network traffic,
represents the workhorse for service management and the enabler for valuable profiling …

One of the cornerstones in censorship circumvention is fully encrypted protocols, which
encrypt every byte of the payload in an attempt to “look like nothing”. In early November …

DNS is often used by attackers as a covert channel for data exfiltration, also known as DNS
tunneling. Since the plaintext DNS lookup leads to privacy issues, DNS over HTTPS (DoH) …

The DNS filtering apparatus of China's Great Firewall (GFW) has evolved considerably over
the past two decades. However, most prior studies of China's DNS filtering were performed …

Increased adoption of HTTPS has created a largely encrypted web, but these security gains
are on a collision course with governments that desire visibility into and control over user …

Malicious activities on the Internet continue to grow in volume and damage, posing a serious
risk to society. Malware with remote control capabilities is considered one of the most …

Russia's Sovereign RuNet was designed to build a Russian national firewall. Previous
anecdotes and isolated events in the past two years reflected centrally coordinated …

Since 2006, Turkmenistan has been listed as one of the few Internet enemies by Reporters
without Borders due to its extensively censored Internet and strictly regulated information …

Although the widely-used Transport Layer Security (TLS) protocol hides application data, an
unencrypted part of the TLS handshake, specifically the server name indication (SNI), is a …

The increased use of video conferencing applications (VCAs) has made it critical to
understand and support end-user quality of experience (QoE) by all stakeholders in the VCA …