{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,24]],"date-time":"2025-08-24T01:08:33Z","timestamp":1755997713148,"version":"3.44.0"},"publisher-location":"New York, NY, USA","reference-count":7,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,12,2]],"date-time":"2024-12-02T00:00:00Z","timestamp":1733097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,2]]},"DOI":"10.1145\/3658644.3691400","type":"proceedings-article","created":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T12:19:20Z","timestamp":1733746760000},"page":"5012-5014","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Poster: DoHunter: A feature fusion-based LLM for DoH tunnel detection"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-7603-1387","authenticated-orcid":false,"given":"Jiawen","family":"Diao","sequence":"first","affiliation":[{"name":"Beijing Electronic Science and Technology Institute, beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5965-2105","authenticated-orcid":false,"given":"Shengmin","family":"Zhao","sequence":"additional","affiliation":[{"name":"Beijing Electronic Science and Technology Institute, beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7113-8064","authenticated-orcid":false,"given":"Jianguo","family":"Xie","sequence":"additional","affiliation":[{"name":"Beijing Electronic Science and Technology Institute, beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8971-7360","authenticated-orcid":false,"given":"Rongna","family":"Xie","sequence":"additional","affiliation":[{"name":"Beijing Electronic Science and Technology Institute, beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4044-6210","authenticated-orcid":false,"given":"Guozhen","family":"Shi","sequence":"additional","affiliation":[{"name":"Beijing Electronic Science and Technology Institute, beijing, China"}]}],"member":"320","published-online":{"date-parts":[[2024,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Hassan Habibi Gharakheili, and Vijay Sivaraman","author":"Lyu Minzhao","year":"2022","unstructured":"Minzhao Lyu, Hassan Habibi Gharakheili, and Vijay Sivaraman. 2022. A Survey on DNS Encryption: Current Development, Malware Misuse, and Inference Techniques. ACM Comput. Surv. 55, 8, Article 162 (dec 2022), 28 pages."},{"volume-title":"DoH Tunneling Traffic Detection Based on Single Packet Features Analysis (ICNCC '23)","author":"Pich Reatrey","key":"e_1_3_2_1_2_1","unstructured":"Reatrey Pich, Sokchenda Sreng, and Jean-Noel Colin. 2024. DoH Tunneling Traffic Detection Based on Single Packet Features Analysis (ICNCC '23). Association for Computing Machinery, New York, NY, USA, 57--63."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2022.3215681"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3183390"},{"key":"e_1_3_2_1_5_1","unstructured":"CIC. 2020. CICDataset\/DoHBrw-2020\/Dataset. http:\/\/205.174.165.80\/CICDataset\/DoHBrw-2020\/. [Accessed May.2024]."},{"key":"e_1_3_2_1_6_1","unstructured":"Rikima Mitsuhashi. 2023. DoH-Tunnel-Traffic-HKD. https:\/\/eprints.lib.hokudai.ac.jp\/dspace\/handle\/2115\/88092. [Accessed May.2024]."},{"key":"e_1_3_2_1_7_1","unstructured":"Catalin Cimpanu. 2020. Iranian hacker group becomes first known APT to weaponize DNS-over-HTTPS (DoH). https:\/\/www.zdnet.com\/article\/iranianhacker-group-becomes-first-known-apt-to-weaponize-dns-over-https-doh\/ [Accessed Mar.2024]."}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Salt Lake City UT USA","acronym":"CCS '24"},"container-title":["Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3691400","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658644.3691400","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T06:09:46Z","timestamp":1755842986000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3691400"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,2]]},"references-count":7,"alternative-id":["10.1145\/3658644.3691400","10.1145\/3658644"],"URL":"https:\/\/doi.org\/10.1145\/3658644.3691400","relation":{},"subject":[],"published":{"date-parts":[[2024,12,2]]},"assertion":[{"value":"2024-12-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}