{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,7]],"date-time":"2026-03-07T18:33:08Z","timestamp":1772908388820,"version":"3.50.1"},"reference-count":119,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"5","license":[{"start":{"date-parts":[[2023,9,1]],"date-time":"2023-09-01T00:00:00Z","timestamp":1693526400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,9,1]],"date-time":"2023-09-01T00:00:00Z","timestamp":1693526400000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,9,1]],"date-time":"2023-09-01T00:00:00Z","timestamp":1693526400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,9,1]],"date-time":"2023-09-01T00:00:00Z","timestamp":1693526400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100008982","name":"National Science Foundation","doi-asserted-by":"publisher","award":["1953786"],"award-info":[{"award-number":["1953786"]}],"id":[{"id":"10.13039\/501100008982","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008982","name":"National Science Foundation","doi-asserted-by":"publisher","award":["1564067"],"award-info":[{"award-number":["1564067"]}],"id":[{"id":"10.13039\/501100008982","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000185","name":"Defense Advanced Research Projects Agency","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100000185","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100016744","name":"Naval Information Warfare Center Pacific","doi-asserted-by":"publisher","award":["N66001-15-C-4067"],"award-info":[{"award-number":["N66001-15-C-4067"]}],"id":[{"id":"10.13039\/100016744","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2023,9,1]]},"DOI":"10.1109\/tdsc.2022.3218191","type":"journal-article","created":{"date-parts":[[2022,11,4]],"date-time":"2022-11-04T01:14:23Z","timestamp":1667524463000},"page":"4135-4153","source":"Crossref","is-referenced-by-count":6,"title":["I Still Know What You Did Last Summer: Inferring Sensitive User Activities on Messaging Applications Through Traffic Analysis"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3056-4758","authenticated-orcid":false,"given":"Ardavan","family":"Bozorgi","sequence":"first","affiliation":[{"name":"College of Information and Computer Sciences, University of Massachusetts Amherst, Amherst, MA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alireza","family":"Bahramali","sequence":"additional","affiliation":[{"name":"College of Information and Computer Sciences, University of Massachusetts Amherst, Amherst, MA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fateme","family":"Rezaei","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of Massachusetts Amherst, Amherst, MA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Amirhossein","family":"Ghafari","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of Massachusetts Amherst, Amherst, MA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7553-6657","authenticated-orcid":false,"given":"Amir","family":"Houmansadr","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of Massachusetts Amherst, Amherst, MA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ramin","family":"Soltani","sequence":"additional","affiliation":[{"name":"Electrical and Computer Engineering Department, University of Massachusetts Amherst, Amherst, MA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4190-9515","authenticated-orcid":false,"given":"Dennis","family":"Goeckel","sequence":"additional","affiliation":[{"name":"ECE Department, University of Massachusetts Amherst, Amherst, MA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7808-7375","authenticated-orcid":false,"given":"Don","family":"Towsley","sequence":"additional","affiliation":[{"name":"College of Information and Computer Sciences, University of Massachusetts Amherst, Amherst, MA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382210"},{"key":"ref56","article-title":"HTTPOS: Sealing information leaks with browser-side obfuscation of encrypted flows","volume":"11","author":"luo","year":"2011","journal-title":"Proc Symp Network and Distributed System Security"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/GCWkshps45667.2019.9024405"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24363"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2011.2178036"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-27809-2_25"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15497-3_13"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-16435-4_15"},{"key":"ref51","article-title":"Information leak from chat group. How do we find out which user is sharing information?","year":"2018"},{"key":"ref50","first-page":"53","article-title":"Limits of anonymity in open environments","author":"kedogan","year":"2002","journal-title":"Proc Int Workshop Inf Hiding"},{"key":"ref46","article-title":"Comparing implementations of secure messaging protocols (long version)","author":"johansen","year":"2017"},{"key":"ref45","article-title":"Help users in Iran reconnect to signal","year":"2021"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45744-4_2"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660368"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2013.2272740"},{"key":"ref41","first-page":"406","article-title":"RAINBOW: A robust and invisible non-blind watermark for network flows","volume":"47","author":"houmansadr","year":"2009","journal-title":"Proc Symp Network and Distributed System Security"},{"key":"ref44","article-title":"Getting around Iran's telegram ban","year":"2018"},{"key":"ref43","article-title":"Number of mobile phone messaging app users worldwide from 2016 to 2021","year":"2018"},{"key":"ref49","first-page":"1447","article-title":"Mobile private contact discovery at scale","author":"kales","year":"2019","journal-title":"Proc 28th USENIX Secur Symp"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2014.16"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/BF02458840"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45496-9_18"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.3390\/app11177789"},{"key":"ref3","article-title":"Admins of 12 reformist telegram channels arrested in iran ahead of may 2017 election","year":"2017"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2003.1199324"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/RAETCS.2018.8443844"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.22"},{"key":"ref101","article-title":"Virtual private networking: An overview","year":"2011"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-39077-7_11"},{"key":"ref35","author":"harris","year":"2012","journal-title":"CISSP All-in-One Exam Guide"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2018.8486211"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CSCWD.2014.6846826"},{"key":"ref36","first-page":"1187","article-title":"k-fingerprinting: A robust scalable website fingerprinting technique","author":"hayes","year":"2016","journal-title":"Proc 25th USENIX Secur Symp"},{"key":"ref31","article-title":"Secure messaging for normal people","author":"engler","year":"2015"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.28"},{"key":"ref33","article-title":"Stalking anyone on telegram","author":"flisback","year":"2015"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45982-0_22"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/1655008.1655013"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2006.890881"},{"key":"ref24","article-title":"Hong Kong protesters warn of Telegram feature that can disclose their identities","author":"cimpanu","year":"2019"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2011.19"},{"key":"ref26","first-page":"35","article-title":"The traffic analysis of continuous-time mixes","author":"danezis","year":"2004","journal-title":"Proc Int Workshop Privacy Enhancing Technol"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2677046.2677048"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382260"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.20"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2008.ECP.413"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.21236\/ADA465464"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-30114-1_21"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-36084-0_2"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48405-1_14"},{"key":"ref12","first-page":"169","article-title":"Effective detection of multimedia protocol tunneling using machine learning","author":"barradas","year":"2018","journal-title":"Proc 27th USENIX Conf Secur Symp"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/1282427.1282386"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44598-6_12"},{"key":"ref97","article-title":"Telegram and instagram being restricted in Iran","year":"2018"},{"key":"ref96","article-title":"Where is telegram based?","year":"2013"},{"key":"ref11","article-title":"At least 60 percent of Iran Internet bandwidth usage accounts for telegram","year":"2017"},{"key":"ref99","article-title":"Torgaurd","year":"2020"},{"key":"ref10","article-title":"OLM cryptogrpahic review","author":"balducci","year":"0"},{"key":"ref98","article-title":"Tor: Pluggable transports","year":"0"},{"key":"ref17","article-title":"Secure P2P messenger releases first version, receives new funding","year":"2018"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/1029179.1029200"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660362"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2665943.2665949"},{"key":"ref93","first-page":"271","article-title":"RAPTOR: Routing attacks on privacy in tor","author":"sun","year":"2015","journal-title":"24th USENIX Security Symp"},{"key":"ref92","article-title":"FireChat Could Be the first in a wave of mesh networking apps","author":"simonite","year":"2014","journal-title":"MIT Technol Rev"},{"key":"ref95","article-title":"What is telegram? What do I do here?","year":"2013"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2737970"},{"key":"ref91","article-title":"Most popular mobile messaging apps worldwide as of January 2018, based on number of monthly active users","year":"2018"},{"key":"ref90","article-title":"Technology preview: Sealed sender for signal","year":"2018"},{"key":"ref89","article-title":"Why messaging app Signal is surging in popularity right now","year":"2021"},{"key":"ref86","article-title":"Signal","year":"2021"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1007\/11863908_2"},{"key":"ref88","article-title":"Signal-cli, an unofficial commandline and dbus interface for signalapp\/libsignal-service-java","year":"2021"},{"key":"ref87","article-title":"The inside story of how signal became the private messaging app for an age of fear and distrust","year":"2020"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1145\/3139550.3139568"},{"key":"ref81","article-title":"Exclusive: Messaging app telegram moves to protect identity of Hong Kong protesters","author":"schectman","year":"2019"},{"key":"ref84","article-title":"Python language bindings for selenium webdriver","year":"2020"},{"key":"ref83","first-page":"1357","article-title":"Beauty and the burst: Remote identification of encrypted video streams","author":"schuster","year":"2017","journal-title":"Proc 26th USENIX Conf Secur Symp"},{"key":"ref80","article-title":"Security analysis of telegram","author":"saribeykan","year":"2017"},{"key":"ref79","article-title":"Russia orders telegram to hand over users’ encryption keys","year":"2018"},{"key":"ref108","article-title":"Wickr","year":"2021"},{"key":"ref78","article-title":"The licensing and compliance lab interviews guillaume roguez, ring project director","author":"robertson","year":"2016","journal-title":"Free Software Foundation"},{"key":"ref109","article-title":"Wickr IO","year":"2020"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45853-0_15"},{"key":"ref107","article-title":"WhatsApp","year":"2020"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2007.80"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102133"},{"key":"ref74","author":"poor","year":"2013","journal-title":"An Introduction to Signal Detection and Estimation"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2007.30"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23105"},{"key":"ref102","first-page":"143","article-title":"Effective attacks and provable defenses for website fingerprinting","author":"wang","year":"2014","journal-title":"Proc 23rd Usenix Conf Secur Symp"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-87403-4_4"},{"key":"ref103","first-page":"1375","article-title":"Walkie-talkie: An efficient defense against passive website fingerprinting attacks","author":"wang","year":"2017","journal-title":"Proc USENIX Conf Secur Symp"},{"key":"ref2","article-title":"Continued arrest of telegram channels admin in orumiyeh","year":"2018"},{"key":"ref1","article-title":"About end-to-end encryption","year":"2022"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/2046556.2046570"},{"key":"ref111","article-title":"Wire web application","year":"2020"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23477"},{"key":"ref112","article-title":"Wondershaper","year":"0"},{"key":"ref73","first-page":"254","article-title":"Encryption is not enough: Inferring user activities on kakaotalk with traffic analysis","author":"park","year":"2015","journal-title":"Proc Int Workshop Inf Secur Appl"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/2046556.2046570"},{"key":"ref110","article-title":"Wire","year":"2020"},{"key":"ref68","article-title":"[tor-project] Turning on timing obfuscation (iat-mode=1) for some default bridges","year":"2016"},{"key":"ref119","first-page":"207","article-title":"On flow correlation attacks and countermeasures in mix networks","author":"zhu","year":"2004","journal-title":"Proc Int Workshop Privacy Enhancing Technol"},{"key":"ref67","article-title":"How many people use telegram in 2021? 55 telegram stats","year":"2018"},{"key":"ref117","article-title":"Detecting stepping stones","author":"zhang","year":"2000","journal-title":"Proc 9th Conf USENIX Secur Symp"},{"key":"ref69","first-page":"77","author":"pan","year":"2002","journal-title":"Maximum Likelihood Estimation"},{"key":"ref118","first-page":"110","article-title":"Unmixing mix traffic","author":"zhu","year":"2005","journal-title":"Proc Int Workshop Privacy Enhancing Technol"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134074"},{"key":"ref115","article-title":"Traffic morphing: An efficient defense against statistical traffic analysis","volume":"9","author":"wright","year":"2009","journal-title":"Proc Symp Network and Distributed System Security"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243824"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2007.14"},{"key":"ref66","article-title":"Nordvpn","year":"2021"},{"key":"ref113","article-title":"WhatsApp reveals major security flaw that could let hackers access phones","year":"2019"},{"key":"ref65","article-title":"Encrypted messaging isn't magic","author":"newman","year":"2018"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1145\/1880022.1880029"},{"key":"ref60","article-title":"MTProto mobile protocol","year":"0"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2005.12"},{"key":"ref61","article-title":"MTProto proxy server for telegram","year":"0"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/8858\/10236919\/9933634-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10236919\/09933634.pdf?arnumber=9933634","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,9,25]],"date-time":"2023-09-25T18:47:29Z","timestamp":1695667649000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9933634\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,9,1]]},"references-count":119,"journal-issue":{"issue":"5"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2022.3218191","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,9,1]]}}}