{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T07:07:20Z","timestamp":1784099240767,"version":"3.55.0"},"reference-count":26,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,24]],"date-time":"2026-05-24T00:00:00Z","timestamp":1779580800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,24]],"date-time":"2026-05-24T00:00:00Z","timestamp":1779580800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,24]]},"DOI":"10.1109\/icc59461.2026.11587823","type":"proceedings-article","created":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T19:38:09Z","timestamp":1784057889000},"page":"1-6","source":"Crossref","is-referenced-by-count":0,"title":["SHIELD-DNS: A Robust Detection Framework for Encrypted DNS Malicious Traffic via Multi-Source Feature Fusion and Adversarial Learning"],"prefix":"10.1109","author":[{"given":"Zhipeng","family":"Qin","sequence":"first","affiliation":[{"name":"Beihang University,State Key Laboratory of Software Development Environment,Beijing,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiangyu","family":"Li","sequence":"additional","affiliation":[{"name":"Beihang University,State Key Laboratory of Software Development Environment,Beijing,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Peng","family":"Wang","sequence":"additional","affiliation":[{"name":"National Computer Network Emergency Response Technical Team,Coordination Center of Shanxi Branch,Taiyuan,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hanbing","family":"Yan","sequence":"additional","affiliation":[{"name":"Coordination Center of China,National Computer Network Emergency Response Technical Team,Beijing,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Quanbo","family":"Pan","sequence":"additional","affiliation":[{"name":"Communication Network Security Center of Shandong Province,Jinan,China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.17487\/rfc7858"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.17487\/rfc8484"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.17487\/rfc9250"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.103001"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23477"},{"key":"ref6","article-title":"k-fingerprinting: A robust scalable website fingerprinting technique","volume-title":"Proc. USENIX Security","author":"Hayes"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243768"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737507"},{"key":"ref9","article-title":"ET-BERT: Pretraining of encrypted traffic representation","volume-title":"Proc. WWW","author":"Lin"},{"key":"ref10","article-title":"YaTC: Yet another traffic classifier: A masked autoencoder based traffic transformer","volume-title":"Proc. AAAI","author":"Zhao"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24301"},{"key":"ref12","article-title":"DOHLYZER: Analyzing and detecting DNS-over-HTTPS traffic","volume-title":"Proc. NSS","author":"Lu"},{"key":"ref13","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. ICLR","author":"Goodfellow"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2019.00130"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3039691"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ISI.2017.8004872"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45744-4_2"},{"key":"ref18","article-title":"Defeating DNN-based traffic analysis systems in real-time with blind adversarial perturbations","volume-title":"Proc. USENIX Security","author":"Nasr"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.06083"},{"key":"ref20","article-title":"Certified adversarial robustness via randomized smoothing","volume-title":"Proc. ICML","author":"Cohen"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref22","article-title":"Walkie-talkie: An efficient defense against passive website fingerprinting attacks","volume-title":"Proc. USENIX Security","author":"Wang"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3050608"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3543507.3583227"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v39i1.32091"},{"key":"ref26","article-title":"Detection of DoH Tunnels using Time-series Classification of Encrypted Traffic","volume-title":"The 5th IEEE Cyber Science and Technology Congress","author":"Montazerolghaem"}],"event":{"name":"ICC 2026 - IEEE International Conference on Communications","location":"Glasgow, United Kingdom","start":{"date-parts":[[2026,5,24]]},"end":{"date-parts":[[2026,5,28]]}},"container-title":["ICC 2026 - IEEE International Conference on Communications"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11586754\/11586037\/11587823.pdf?arnumber=11587823","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T06:20:17Z","timestamp":1784096417000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11587823\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,24]]},"references-count":26,"URL":"https:\/\/doi.org\/10.1109\/icc59461.2026.11587823","relation":{},"subject":[],"published":{"date-parts":[[2026,5,24]]}}}