{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,11]],"date-time":"2026-02-11T21:24:41Z","timestamp":1770845081134,"version":"3.50.1"},"reference-count":25,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,10,5]],"date-time":"2025-10-05T00:00:00Z","timestamp":1759622400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,5]],"date-time":"2025-10-05T00:00:00Z","timestamp":1759622400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,10,5]]},"DOI":"10.1109\/smc58881.2025.11342687","type":"proceedings-article","created":{"date-parts":[[2026,1,28]],"date-time":"2026-01-28T20:54:44Z","timestamp":1769633684000},"page":"5581-5588","source":"Crossref","is-referenced-by-count":0,"title":["FakeApp: A High-Precision Method for Domain Fronting Detection in Real Networks with Neuro-Symbolic Integration"],"prefix":"10.1109","author":[{"given":"Yibo","family":"Xie","sequence":"first","affiliation":[{"name":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"}]},{"given":"Gaopeng","family":"Gou","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"}]},{"given":"Gang","family":"Xiong","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"}]},{"given":"Zhen","family":"Li","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"}]},{"given":"Wei","family":"Xia","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2015-0009"},{"key":"ref2","article-title":"New exfiltrator-22 post-exploitation kit linked to lockbit ransomware","volume-title":"Bleeping Computer","author":"Toulas","year":"2023"},{"key":"ref3","article-title":"Apt29 domain fronting with tor","volume-title":"Mandiant","author":"Dunwoody","year":"2017"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1002\/9781119249924"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355594"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.23394"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.14"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813715"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/HPCC\/SmartCity\/DSS.2018.00075"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/5587837"},{"key":"ref11","article-title":"Fingerprinting obfuscated proxy traffic with encapsulated tls handshakes","volume-title":"Proceedings of the 33st USENIX Security Symposium (USENIX Security 24), August 14-16, 2024, Philadelphia, PA, USA","author":"Xue"},{"key":"ref12","first-page":"3327","article-title":"Domain shadowing: Leveraging content delivery networks for robust Blocking-Resistant communications","volume-title":"Proceedings of the 30th USENIX Security Symposium (Security 21), August 11-13, 2021, Vancouver, B.C., Canada","author":"Wei"},{"key":"ref13","article-title":"meek","volume-title":"The Tor Project","author":"F\u00e6r\u00f8y","year":"2020"},{"key":"ref14","article-title":"moat | tor project | support","volume-title":"The Tor Project","author":"Glossary","year":"2023"},{"key":"ref15","article-title":"Snowflake technical overview","volume-title":"Kero Serene Net","year":"2017"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3589334.3645656"},{"key":"ref17","article-title":"The evolution of covert communication: From domain fronting to paas redirectors","volume-title":"BC SECURITY","year":"2023"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/DSC53577.2021.00020"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23511"},{"key":"ref20","article-title":"Tor browser user manual","volume-title":"The Tor Project","year":"2023"},{"key":"ref21","article-title":"Browser market share worldwide","year":"2024"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CSCWD57460.2023.10152736"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23386"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.5220\/0006105602530262"},{"key":"ref25","first-page":"2783","article-title":"99% false positives: A qualitative study of SOC analysts\u2019 perspectives on security alarms","volume-title":"Proceedings of the 31st USENIX Security Symposium (Security 22), Boston, Ma, USA","author":"Alahmadi"}],"event":{"name":"2025 IEEE International Conference on Systems, Man, and Cybernetics (SMC)","location":"Vienna, Austria","start":{"date-parts":[[2025,10,5]]},"end":{"date-parts":[[2025,10,8]]}},"container-title":["2025 IEEE International Conference on Systems, Man, and Cybernetics (SMC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11342430\/11342431\/11342687.pdf?arnumber=11342687","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,11]],"date-time":"2026-02-11T20:49:53Z","timestamp":1770842993000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11342687\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,5]]},"references-count":25,"URL":"https:\/\/doi.org\/10.1109\/smc58881.2025.11342687","relation":{},"subject":[],"published":{"date-parts":[[2025,10,5]]}}}