activity
20232025
most citedLow-Quality Training Data Only? A Robust Framework for Detecting Encrypted Malicious Network Traffic

53 citations · 64 across the 7 of their papers we have counts for

collaborators
Showing cs.CRShow all

8 papers · 1 filter

cs.CR2025

Off-Path TCP Exploits: PMTUD Breaks TCP Connection Isolation in IP Address Sharing Scenarios

Xuewei Feng, Zhaoxi Li, Qi Li +3

Path MTU Discovery (PMTUD) and IP address sharing are integral aspects of modern Internet infrastructure. In this paper, we investigate the security vulnerabilities associated with…

cs.CR2024

ReDAN: An Empirical Study on Remote DoS Attacks against NAT Networks

Xuewei Feng, Yuxiang Yang, Qi Li +6

In this paper, we conduct an empirical study on remote DoS attacks targeting NAT networks. We show that Internet attackers operating outside local NAT networks can remotely identif…

cs.CR2024

Exploiting Cross-Layer Vulnerabilities: Off-Path Attacks on the TCP/IP Protocol Suite

Xuewei Feng, Qi Li, Kun Sun +2

After more than 40 years of development, the fundamental TCP/IP protocol suite, serving as the backbone of the Internet, is widely recognized for having achieved an elevated level…

cs.CR2024

Towards Fine-Grained Webpage Fingerprinting at Scale

Xiyuan Zhao, Xinhao Deng, Qi Li +4

Website Fingerprinting (WF) attacks can effectively identify the websites visited by Tor clients via analyzing encrypted traffic patterns. Existing attacks focus on identifying dif…

cs.CR2024

BlueSWAT: A Lightweight State-Aware Security Framework for Bluetooth Low Energy

Xijia Che, Yi He, Xuewei Feng +3

Bluetooth Low Energy (BLE) is a short-range wireless communication technology for resource-constrained IoT devices. Unfortunately, BLE is vulnerable to session-based attacks, where…

cs.CR20245 cited

Exploiting Sequence Number Leakage: TCP Hijacking in NAT-Enabled Wi-Fi Networks

Yuxiang Yang, Xuewei Feng, Qi Li +3

In this paper, we uncover a new side-channel vulnerability in the widely used NAT port preservation strategy and an insufficient reverse path validation strategy of Wi-Fi routers,…