Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: You Do (Not) Belong Here: Detecting DPI Evasion Attacks with Context
  Learning   As Deep Packet Inspection (DPI) middleboxes become increasingly popular, a
spectrum of adversarial attacks have emerged with the goal of evading such
middleboxes. Many of these attacks exploit discrepancies between the middlebox
network protocol implementations, and the more rigorous/complete versions
implemented at end hosts. These evasion attacks largely involve subtle
manipulations of packets to cause different behaviours at DPI and end hosts, to
cloak malicious network traffic that is otherwise detectable. With recent
automated discovery, it has become prohibitively challenging to manually curate
rules for detecting these manipulations. In this work, we propose CLAP, the
first fully-automated, unsupervised ML solution to accurately detect and
localize DPI evasion attacks. By learning what we call the packet context,
which essentially captures inter-relationships across both (1) different
packets in a connection; and (2) different header fields within each packet,
from benign traffic traces only, CLAP can detect and pinpoint packets that
violate the benign packet contexts (which are the ones that are specially
crafted for evasion purposes). Our evaluations with 73 state-of-the-art DPI
evasion attacks show that CLAP achieves an Area Under the Receiver Operating
Characteristic Curve (AUC-ROC) of 0.963, an Equal Error Rate (EER) of only
0.061 in detection, and an accuracy of 94.6% in localization. These results
suggest that CLAP can be a promising tool for thwarting DPI evasion attacks.

9
The categories of this paper are: nlin
10
The categories of this paper are: q-bio
12
The categories of this paper are: nucl-th
32
The categories of this paper are: atom-ph
7
The categories of this paper are: hep-th
8
The categories of this paper are: hep-ex
35
The categories of this paper are: mtrl-th
25
The categories of this paper are: patt-sol
37
The categories of this paper are: supr-con
6
The categories of this paper are: astro-ph
21
The categories of this paper are: adap-org
33
The categories of this paper are: plasm-ph
3
The categories of this paper are: physics
2
The categories of this paper are: math
16
The categories of this paper are: stat
13
The categories of this paper are: quant-ph