{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T17:21:24Z","timestamp":1782926484843,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":100,"publisher":"ACM","license":[{"start":{"date-parts":[[2019,11,6]],"date-time":"2019-11-06T00:00:00Z","timestamp":1572998400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100002920","name":"Research Grants Council, University Grants Committee","doi-asserted-by":"publisher","award":["C1008-16G, CityU 11212717"],"award-info":[{"award-number":["C1008-16G, CityU 11212717"]}],"id":[{"id":"10.13039\/501100002920","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2019,11,6]]},"DOI":"10.1145\/3319535.3339814","type":"proceedings-article","created":{"date-parts":[[2019,11,7]],"date-time":"2019-11-07T13:08:32Z","timestamp":1573132112000},"page":"2351-2367","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":53,"title":["LightBox"],"prefix":"10.1145","author":[{"given":"Huayi","family":"Duan","sequence":"first","affiliation":[{"name":"City University of Hong Kong and City University of Hong Kong Shenzhen Research Institute, Hong Kong, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Cong","family":"Wang","sequence":"additional","affiliation":[{"name":"City University of Hong Kong and City University of Hong Kong Shenzhen Research Institute, Hong Kong, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xingliang","family":"Yuan","sequence":"additional","affiliation":[{"name":"Monash University, Clayton, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yajin","family":"Zhou","sequence":"additional","affiliation":[{"name":"Zhejiang University & Alibaba-Zhejiang University Joint Institute of Frontier, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qian","family":"Wang","sequence":"additional","affiliation":[{"name":"Wuhan University, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kui","family":"Ren","sequence":"additional","affiliation":[{"name":"Zhejiang University & Alibaba-Zhejiang University Joint Institute of Frontier, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2019,11,6]]},"reference":[{"key":"e_1_3_2_2_1_1","volume-title":"Proc. of ACM HASP.","author":"Anati Ittai","year":"2013"},{"key":"e_1_3_2_2_2_1","volume-title":"Proc. of USENIX OSDI.","author":"Arnautov Sergei","year":"2016"},{"key":"e_1_3_2_2_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/2940147.2940150"},{"key":"e_1_3_2_2_5_1","unstructured":"AWS. 2018. AWS Direct Connect. Online at: https:\/\/aws.amazon.com\/directconnect\/.  AWS. 2018. AWS Direct Connect. Online at: https:\/\/aws.amazon.com\/directconnect\/."},{"key":"e_1_3_2_2_6_1","unstructured":"Azure. 2018. Azure ExpressRoute. Online at: https:\/\/azure.microsoft.com\/en-us\/services\/expressroute\/.  Azure. 2018. Azure ExpressRoute. Online at: https:\/\/azure.microsoft.com\/en-us\/services\/expressroute\/."},{"key":"e_1_3_2_2_7_1","volume-title":"Proc. of USENIX OSDI.","author":"Baumann Andrew","year":"2014"},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/2038916.2038924"},{"key":"e_1_3_2_2_9_1","volume-title":"The CAIDA UCSD Anonymized Internet Traces 2016 - April 6th. Online at: http:\/\/www.caida.org\/data\/passive\/passive_2016_dataset.xml","author":"CAIDA."},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053013"},{"key":"e_1_3_2_2_11_1","volume-title":"Proc. of ACM HotNets.","author":"Casado Martin","year":"2008"},{"key":"e_1_3_2_2_12_1","unstructured":"Shanwei Cen and Bo Zhang. 2017. Trusted Time and Monotonic Counters with Intel Software Guard Extensions Platform Services. Online at: https:\/\/software.intel.com\/sites\/default\/files\/managed\/1b\/a2\/Intel-SGX-Platform-Services.pdf.  Shanwei Cen and Bo Zhang. 2017. Trusted Time and Monotonic Counters with Intel Software Guard Extensions Platform Services. Online at: https:\/\/software.intel.com\/sites\/default\/files\/managed\/1b\/a2\/Intel-SGX-Platform-Services.pdf."},{"key":"e_1_3_2_2_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053007"},{"key":"e_1_3_2_2_14_1","volume-title":"Proc. of USENIX NSDI.","author":"Choi Byungkwon","year":"2016"},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2843533"},{"key":"e_1_3_2_2_16_1","first-page":"114","article-title":"Analyzing android encrypted network traffic to identify user actions","volume":"11","author":"Conti Mauro","year":"2016","journal-title":"IEEE TIFS"},{"key":"e_1_3_2_2_17_1","volume-title":"Proc. of USENIX Security.","author":"Costan Victor","year":"2016"},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3040992.3040994"},{"key":"e_1_3_2_2_19_1","volume-title":"Dyer","author":"Coull Scott E.","year":"2014"},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660361"},{"key":"e_1_3_2_2_21_1","unstructured":"Robert DeFrancesco. 2019. Securing The Cloud With Zscaler. Online at: https:\/\/www.forbes.com\/sites\/robertdefrancesco\/2019\/03\/06\/securing-the-cloud-with-zscaler\/#29281a785d52.  Robert DeFrancesco. 2019. Securing The Cloud With Zscaler. Online at: https:\/\/www.forbes.com\/sites\/robertdefrancesco\/2019\/03\/06\/securing-the-cloud-with-zscaler\/#29281a785d52."},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629578"},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.28"},{"key":"e_1_3_2_2_24_1","volume-title":"Proc. of USENIX NSDI.","author":"Eisenbud Daniel E","year":"2016"},{"key":"e_1_3_2_2_25_1","volume-title":"Proc. of 7th Workshop on Distributed Data and Structures (WDAS'06)","author":"Erlingsson Ulfar","year":"2006"},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2017.2753044"},{"key":"e_1_3_2_2_27_1","unstructured":"Edward Fjellsk\u00e5l. 2017. Passive Real-time Asset Detection System. Online at: https:\/\/github.com\/gamelinux\/prads.  Edward Fjellsk\u00e5l. 2017. Passive Real-time Asset Detection System. Online at: https:\/\/github.com\/gamelinux\/prads."},{"key":"e_1_3_2_2_28_1","unstructured":"Chema Garc\u00eda. 2018. libntoh. Online at: https:\/\/github.com\/sch3m4\/libntoh.  Chema Garc\u00eda. 2018. libntoh. Online at: https:\/\/github.com\/sch3m4\/libntoh."},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2619239.2626313"},{"key":"e_1_3_2_2_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/2342441.2342457"},{"key":"e_1_3_2_2_31_1","unstructured":"Google. 2018. Google Dedicated Interconnect. Online at: https:\/\/cloud.google.com\/interconnect\/docs\/concepts\/dedicated-overview.  Google. 2018. Google Dedicated Interconnect. Online at: https:\/\/cloud.google.com\/interconnect\/docs\/concepts\/dedicated-overview."},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3065913.3065915"},{"key":"e_1_3_2_2_33_1","unstructured":"The Tcpdump Group. 2018. libpcap. Online at: https:\/\/www.tcpdump.org.  The Tcpdump Group. 2018. libpcap. Online at: https:\/\/www.tcpdump.org."},{"key":"e_1_3_2_2_34_1","volume-title":"Proc. of USENIX Security.","author":"Gruss Daniel","year":"2017"},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3106989.3106994"},{"key":"e_1_3_2_2_36_1","volume-title":"Proc. of ALENEX\/ANALCO.","author":"Heileman Gregory L","year":"2005"},{"key":"e_1_3_2_2_37_1","volume-title":"Proc. of USENIX OSDI.","author":"Hunt Tyler","year":"2016"},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3278493"},{"key":"e_1_3_2_2_39_1","unstructured":"Zscaler Inc. 2019 a. Encrypted Traffic Dashboard. Online at: https:\/\/www.zscaler.com\/threatlabz\/encrypted-traffic-dashboard.  Zscaler Inc. 2019 a. Encrypted Traffic Dashboard. Online at: https:\/\/www.zscaler.com\/threatlabz\/encrypted-traffic-dashboard."},{"key":"e_1_3_2_2_40_1","unstructured":"Zscaler Inc. 2019 b. SSL Inspection. Online at: https:\/\/www.zscaler.com\/products\/ssl-inspection.  Zscaler Inc. 2019 b. SSL Inspection. Online at: https:\/\/www.zscaler.com\/products\/ssl-inspection."},{"key":"e_1_3_2_2_41_1","unstructured":"Zscaler Inc. 2019 c. Zscaler Architecture: Cloud from the beginning. Online at: https:\/\/www.zscaler.com\/products\/cloud-architecture-security-as-a-service.  Zscaler Inc. 2019 c. Zscaler Architecture: Cloud from the beginning. Online at: https:\/\/www.zscaler.com\/products\/cloud-architecture-security-as-a-service."},{"key":"e_1_3_2_2_42_1","unstructured":"Intel. 2017. Data plane development kit. Online at: http:\/\/www.dpdk.org.  Intel. 2017. Data plane development kit. Online at: http:\/\/www.dpdk.org."},{"key":"e_1_3_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23011"},{"key":"e_1_3_2_2_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382232"},{"key":"e_1_3_2_2_45_1","volume-title":"Proc. of USENIX NSDI.","author":"Jamshed Muhammad Asim","year":"2014"},{"key":"e_1_3_2_2_46_1","volume-title":"Proc. of USENIX NSDI.","author":"Kablan Murad","year":"2017"},{"key":"e_1_3_2_2_47_1","volume-title":"Proc. of USENIX NSDI.","author":"Khalid Junaid","year":"2016"},{"key":"e_1_3_2_2_48_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-00975-4_1"},{"key":"e_1_3_2_2_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/354871.354874"},{"key":"e_1_3_2_2_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1977.229904"},{"key":"e_1_3_2_2_51_1","volume-title":"Proc. of USENIX NSDI.","author":"Lan Chang","year":"2016"},{"key":"e_1_3_2_2_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/IPDPS.2010.5470368"},{"key":"e_1_3_2_2_53_1","volume-title":"The 21 scariest data breaches of","author":"Leskin Paige","year":"2018"},{"key":"e_1_3_2_2_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243862"},{"key":"e_1_3_2_2_55_1","volume-title":"Proc. of USENIX ATC.","author":"Lind Joshua","year":"2017"},{"key":"e_1_3_2_2_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/2487726.2488368"},{"key":"e_1_3_2_2_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/2876019.2876021"},{"key":"e_1_3_2_2_58_1","doi-asserted-by":"crossref","unstructured":"David Mills. 1985. Network Time Protocol. Online at: https:\/\/tools.ietf.org\/html\/rfc958.  David Mills. 1985. Network Time Protocol. Online at: https:\/\/tools.ietf.org\/html\/rfc958.","DOI":"10.17487\/rfc0958"},{"key":"e_1_3_2_2_59_1","volume-title":"Proc. of IEEE S&P.","author":"Mishra P."},{"key":"e_1_3_2_2_60_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66787-4_4"},{"key":"e_1_3_2_2_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/3143361.3143383"},{"key":"e_1_3_2_2_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/3143361.3143383"},{"key":"e_1_3_2_2_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/3064176.3064219"},{"key":"e_1_3_2_2_64_1","volume-title":"Proc. of USENIX OSDI.","author":"Panda Aurojit","year":"2016"},{"key":"e_1_3_2_2_65_1","doi-asserted-by":"publisher","DOI":"10.1145\/2486001.2486026"},{"key":"e_1_3_2_2_66_1","volume-title":"Proc. of USENIX NSDI.","author":"Poddar Rishabh","year":"2018"},{"key":"e_1_3_2_2_67_1","unstructured":"HAProxy Project. 2018. The reliable high performance tcp\/http load balancer. Online at: http:\/\/www.haproxy.org\/.  HAProxy Project. 2018. The reliable high performance tcp\/http load balancer. Online at: http:\/\/www.haproxy.org\/."},{"key":"e_1_3_2_2_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/3029806.3029821"},{"key":"e_1_3_2_2_69_1","volume-title":"Proc. of USENIX ATC.","author":"Rizzo Luigi","year":"2012"},{"key":"e_1_3_2_2_70_1","volume-title":"The Snowden Leaks and the Public","author":"Rusbridger Alan","year":"2013"},{"key":"e_1_3_2_2_71_1","unstructured":"Satori. 2017. Fast multi-core TCP and WebSockets load generator. Online at: https:\/\/github.com\/machinezone\/tcpkali.  Satori. 2017. Fast multi-core TCP and WebSockets load generator. Online at: https:\/\/github.com\/machinezone\/tcpkali."},{"key":"e_1_3_2_2_72_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.10"},{"key":"e_1_3_2_2_73_1","volume-title":"Proc. of USENIX NSDI.","author":"Sekar Vyas","year":"2012"},{"key":"e_1_3_2_2_74_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23037"},{"key":"e_1_3_2_2_75_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134095"},{"key":"e_1_3_2_2_76_1","doi-asserted-by":"publisher","DOI":"10.1145\/2342356.2342359"},{"key":"e_1_3_2_2_77_1","doi-asserted-by":"publisher","DOI":"10.1145\/2785956.2787502"},{"key":"e_1_3_2_2_78_1","doi-asserted-by":"publisher","DOI":"10.1145\/2876019.2876032"},{"key":"e_1_3_2_2_79_1","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897885"},{"key":"e_1_3_2_2_80_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243768"},{"key":"e_1_3_2_2_81_1","unstructured":"Snort. 2018a. Network Intrusion Detection & Prevention System. Online at: https:\/\/www.snort.org\/.  Snort. 2018a. Network Intrusion Detection & Prevention System. Online at: https:\/\/www.snort.org\/."},{"key":"e_1_3_2_2_82_1","unstructured":"Snort. 2018b. Rule Subscriptions. Online at: https:\/\/www.snort.org\/products#rule_subscriptions.  Snort. 2018b. Rule Subscriptions. Online at: https:\/\/www.snort.org\/products#rule_subscriptions."},{"key":"e_1_3_2_2_83_1","doi-asserted-by":"publisher","DOI":"10.1145\/3098822.3098826"},{"key":"e_1_3_2_2_84_1","doi-asserted-by":"publisher","DOI":"10.1145\/3173162.3177155"},{"key":"e_1_3_2_2_85_1","doi-asserted-by":"publisher","DOI":"10.1145\/3268935.3268942"},{"key":"e_1_3_2_2_86_1","doi-asserted-by":"publisher","DOI":"10.1145\/3185467.3185469"},{"key":"e_1_3_2_2_87_1","volume-title":"Proc. of USENIX ATC.","author":"Porter Donald E","year":"2017"},{"key":"e_1_3_2_2_88_1","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132783"},{"key":"e_1_3_2_2_89_1","doi-asserted-by":"publisher","DOI":"10.1145\/2815400.2815417"},{"key":"e_1_3_2_2_90_1","volume-title":"Proc. of USENIX OSDI.","author":"Walfish Michael","year":"2004"},{"key":"e_1_3_2_2_91_1","volume-title":"Proc. of USENIX Security.","author":"Wang Tao","year":"2014"},{"key":"e_1_3_2_2_92_1","volume-title":"Proc. of USENIX Security.","author":"Wang Tao","year":"2017"},{"key":"e_1_3_2_2_93_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134038"},{"key":"e_1_3_2_2_94_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45744-4_22"},{"key":"e_1_3_2_2_95_1","doi-asserted-by":"publisher","DOI":"10.1145\/3079856.3080208"},{"key":"e_1_3_2_2_96_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.34"},{"key":"e_1_3_2_2_97_1","unstructured":"wolfSSL Inc. 2017. wolfSSL. Online at: https:\/\/www.wolfssl.com\/wolfssl-with-intel-sgx\/.  wolfSSL Inc. 2017. wolfSSL. Online at: https:\/\/www.wolfssl.com\/wolfssl-with-intel-sgx\/."},{"key":"e_1_3_2_2_98_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.45"},{"key":"e_1_3_2_2_99_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2016.7524526"},{"key":"e_1_3_2_2_100_1","unstructured":"Fan Zhang. 2017. mbedtls-SGX. Online at: https:\/\/github.com\/bl4ck5un\/mbedtls-SGX.  Fan Zhang. 2017. mbedtls-SGX. Online at: https:\/\/github.com\/bl4ck5un\/mbedtls-SGX."},{"key":"e_1_3_2_2_101_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978326"}],"event":{"name":"CCS '19: 2019 ACM SIGSAC Conference on Computer and Communications Security","location":"London United Kingdom","acronym":"CCS '19","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3319535.3339814","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3319535.3339814","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T23:24:01Z","timestamp":1750202641000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3319535.3339814"}},"subtitle":["Full-stack Protected Stateful Middlebox at Lightning Speed"],"short-title":[],"issued":{"date-parts":[[2019,11,6]]},"references-count":100,"alternative-id":["10.1145\/3319535.3339814","10.1145\/3319535"],"URL":"https:\/\/doi.org\/10.1145\/3319535.3339814","relation":{},"subject":[],"published":{"date-parts":[[2019,11,6]]},"assertion":[{"value":"2019-11-06","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}