9 papers
Moirae: A Multimodal Agent Collaborative Framework for Dynamic Android Malware Detection
Xueying Zeng, Youquan Xian, Yanze Li +9
The Android ecosystem faces persistent and rapidly evolving malware threats. Existing machine learning detectors are vulnerable to concept drift because they rely on implementation…
The Colossus with Feet of Clay: Debunking Encrypted Traffic Classifiers under PQC Evolution
Bingzhen Li, Lingjia Meng, Runhan Song +6
Encrypted traffic classifiers often achieve high accuracy under matched training and testing conditions, implicitly assuming that deployment traffic follows the training distributi…
CipherSight: Robust Website Fingerprinting via Record-Resource Semantic Supervision under Distribution Shifts
Runhan Song, Qiqi Liu, Chuanzhou Pan +6
HTTPS website fingerprinting (WF) aims to identify visited websites from metadata observable in encrypted traffic. However, real-world deployments introduce a significant out-of-di…
MIDS: Detecting Stealthy Masquerade and Tampering Attacks on CAN Bus via Bidirectional Mamba
Qiqi Liu, Runhan Song, Lei Cui +3
The Controller Area Network (CAN) protocol is the primary communication standard for Electronic Control Units (ECUs) in modern vehicles, but its lack of encryption and authenticati…
ResAware: Cross-Environment Website Fingerprinting via Resource-Privileged Distillation
Chongru Fan, Wei Wang, Wentao Huang +5
While Website Fingerprinting (WF) attacks achieve high accuracy in controlled laboratory settings, they often degrade substantially in real-world environments due to spatio-tempora…
MARD: A Multi-Agent Framework for Robust Android Malware Detection
Xueying Zeng, Youquan Xian, Sihao Liu +4
With the rapid evolution of Android applications, traditional machine learning-based detection models suffer from concept drift. Additionally, they are constrained by shallow featu…
UDFS: Lightweight Representation-Driven Open World Robust Encrypted Traffic Classification
Youquan Xian, Xueying Zeng, Aoxiang Zhou +4
In recent years, sequence features such as packet length have received considerable attention due to their central role in encrypted traffic analysis. Existing sequence modeling ap…
CTISum: A New Benchmark Dataset For Cyber Threat Intelligence Summarization
Wei Peng, Junmei Ding, Wei Wang +4
Cyber Threat Intelligence (CTI) summarization involves generating concise and accurate highlights from web intelligence data, which is critical for providing decision-makers with a…
Efficiently and Effectively: A Two-stage Approach to Balance Plaintext and Encrypted Text for Traffic Classification
Wei Peng, Lei Cui, Wei Cai +3
Encrypted traffic classification is the task of identifying the application or service associated with encrypted network traffic. One effective approach for this task is to use dee…