{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,8]],"date-time":"2026-01-08T03:15:04Z","timestamp":1767842104936,"version":"3.49.0"},"reference-count":52,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2025,8,1]],"date-time":"2025-08-01T00:00:00Z","timestamp":1754006400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,8,1]],"date-time":"2025-08-01T00:00:00Z","timestamp":1754006400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,8,1]],"date-time":"2025-08-01T00:00:00Z","timestamp":1754006400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key Research and Development Program of China","award":["2022YFB3102301"],"award-info":[{"award-number":["2022YFB3102301"]}]},{"name":"National Science Foundation for Distinguished Young Scholars of China","award":["62425201"],"award-info":[{"award-number":["62425201"]}]},{"name":"Science Fund for Creative Research Groups of the National Natural Science Foundation of China","award":["62221003"],"award-info":[{"award-number":["62221003"]}]},{"name":"Key Program of the National Natural Science Foundation of China","award":["62132011"],"award-info":[{"award-number":["62132011"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U22B2031"],"award-info":[{"award-number":["U22B2031"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Netw."],"published-print":{"date-parts":[[2025,8]]},"DOI":"10.1109\/ton.2025.3543734","type":"journal-article","created":{"date-parts":[[2025,2,26]],"date-time":"2025-02-26T13:49:56Z","timestamp":1740577796000},"page":"1701-1716","source":"Crossref","is-referenced-by-count":1,"title":["StateShield: Real-Time Defenses Against Information Leakage Over Connectionless Protocols"],"prefix":"10.1109","volume":"33","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1040-0262","authenticated-orcid":false,"given":"Haibin","family":"Li","sequence":"first","affiliation":[{"name":"Department of Computer Science and Technology, Tsinghua University, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8776-8730","authenticated-orcid":false,"given":"Qi","family":"Li","sequence":"additional","affiliation":[{"name":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-2744-0624","authenticated-orcid":false,"given":"Yingying","family":"Su","sequence":"additional","affiliation":[{"name":"Zhongguancun Laboratory, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3736-6623","authenticated-orcid":false,"given":"Xuewei","family":"Feng","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Technology, Tsinghua University, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4568-6125","authenticated-orcid":false,"given":"Chuanpu","family":"Fu","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Technology, Tsinghua University, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2587-8517","authenticated-orcid":false,"given":"Ke","family":"Xu","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Technology, Tsinghua University, Beijing, China"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.23037"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417884"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.23049"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3486219"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484585"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23204"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24007"},{"key":"ref8","first-page":"3829","article-title":"Jaqen: A high-performance switch-native approach for detecting and mitigating volumetric DDoS attacks with programmable switches","volume-title":"Proc. USENIX Secur. Symp.","author":"Liu"},{"key":"ref9","first-page":"3865","article-title":"Ripple: A programmable, decentralized link-flooding defense against adaptive adversaries","volume-title":"Proc. USENIX Secur.","author":"Xing"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179404"},{"key":"ref11","first-page":"2039","article-title":"NetWarden: Mitigating network covert channels while preserving performance","volume-title":"Proc. 29th USENIX Secur. Symp.","author":"Xing"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.17487\/rfc0793"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.17487\/rfc0792"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.17487\/rfc0768"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/1030083.1030108"},{"key":"ref16","first-page":"173","article-title":"PHY covert channels: Can you see the idles?","volume-title":"Proc. 11th USENIX Symp. Networked Syst. Design Implement. (NSDI)","author":"Lee"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2011.5958260"},{"issue":"5","key":"ref18","article-title":"Covert channels in the TCP\/IP protocol suite","volume":"2","author":"Rowland","year":"1997","journal-title":"First Monday"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/PERVASIVE.2015.7087183"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-36415-3_2"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-74124-4_5"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.17487\/rfc6274"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-76481-8_18"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00112-7"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.jalgor.2003.12.001"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/78922.78925"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/948205.948225"},{"key":"ref28","volume-title":"MAWI Working Group Traffic Archive","year":"2023"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.17487\/rfc6864"},{"key":"ref30","volume-title":"Data Set for IMC 2010 Data Center Measurement","year":"2024"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ICOASE56293.2022.10075591"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24067"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2022.3195871"},{"key":"ref34","first-page":"6203","article-title":"Netbeacon: An efficient design of intelligent network data plane","volume-title":"Proc. Secur. USENIX","author":"Zhou"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484758"},{"key":"ref36","first-page":"513","article-title":"Re-architecting traffic analysis with neural network interface cards","volume-title":"Proc. 19th USENIX Symp. Netw. Syst. Design Implement. (NSDI)","author":"Siracusano"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3386367.3431311"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM41043.2020.9155278"},{"key":"ref39","first-page":"1","article-title":"Dos and don\u2019ts of machine learning in computer security","volume-title":"Proc. 31st USENIX Security Symposium (USENIX Security)","author":"Arp"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3544216.3544222"},{"key":"ref41","first-page":"257","article-title":"Idle port scanning and non-interference analysis of network protocol stacks using model checking","volume-title":"Proc. USENIX Secur. Symp.","author":"Ensafi"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-04918-2_11"},{"key":"ref43","first-page":"209","article-title":"Off-path TCP exploits: Global rate limit considered dangerous","volume-title":"Proc. 25th USENIX Secur. Symp.","author":"Cao"},{"key":"ref44","article-title":"Network covert channels: Design, analysis, detection, and elimination","author":"Cabuk","year":"2006"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-87403-4_12"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2008.4630112"},{"key":"ref47","first-page":"64","article-title":"Keyboards and covert channels","volume-title":"Proc. USENIX Secur. Symp.","author":"Shah"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948115"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-36467-6_15"},{"issue":"16","key":"ref50","first-page":"1","article-title":"Covert channels in TCP and IP headers","volume":"10","author":"Hintz","year":"2002","journal-title":"Presentation DEFCON"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ICON.2004.1409207"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/s11432-021-3545-0"}],"container-title":["IEEE Transactions on Networking"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10723154\/11131549\/10906071.pdf?arnumber=10906071","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,23]],"date-time":"2025-08-23T00:52:09Z","timestamp":1755910329000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10906071\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,8]]},"references-count":52,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/ton.2025.3543734","relation":{},"ISSN":["2998-4157"],"issn-type":[{"value":"2998-4157","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,8]]}}}