Feature importance analysis across all models identified Flow Duration and packet length features (Forward Packet Length Maximum, Backward Packet Length Maximum, Total Length of Forward/Backward Packets) as the most discriminative for separating normal from anomalous encrypted traffic — these seven flow-level metadata features suffice to classify traffic without DPI.

Synthetic anomalous traffic (attack patterns) is substantially harder to reproduce than normal traffic: models trained on synthetic data showed good precision for normal traffic (class 0) but notably lower precision for anomalous traffic (class 1), with tree-based models (XGBoost, Random Forest) proving more robust to synthetic training data than neural networks.

§V.C, Fig. 11 evaluation

Traditional DPI examining payload contents is described as 'largely ineffective' against TLS/SSL-encrypted traffic, forcing modern network security systems entirely onto flow-based and statistical analysis of packet metadata — packet sizes, inter-arrival timing, flow duration, and directional characteristics — without decrypting content.

§II.A evaluation

XGBoost classifiers trained and tested on real encrypted traffic data (CICIDS2017 + darknet) achieved 99.8% accuracy; models trained only on synthetic data reached 93.1% accuracy on real-data test sets, demonstrating that ML classifiers can effectively detect anomalous encrypted traffic without inspecting payload contents.

§V.C detection

Kolmogorov-Smirnov tests showed statistically insignificant differences (p-values above 0.05) between real and synthetic feature distributions, and correlation matrix comparison showed a maximum absolute difference of 0.016 across all feature pairs — achieving an overall synthetic data quality score of 88.2%, sufficient to train production-grade anomaly detectors without access to real attack traffic.

§IV.A, §IV.C, Fig. 7, Fig. 8 evaluation

Based on analysis of over 100,000 leaked Geedge Networks documents, InterSecLab (2025) found that Geedge supplied China-GFW-equivalent censorship and surveillance systems to Kazakhstan, Ethiopia, Pakistan, and Myanmar. The systems include deep packet inspection, real-time mobile user monitoring, fine-grained traffic control, regionally customizable censorship rules, and — per WIRED's reporting — ML-based extraction of metadata from encrypted traffic to determine whether a flow is likely from a VPN or circumvention tool.

2026-anon-2026-27-vpn §8 (InterSecLab / WIRED section) dpiml-classifierfully-encrypted-detecttraffic-shape

Existing Provably Secure Steganography (PSS) schemes require access to the explicit output distribution of the generative model, a requirement that is impractical for black-box API deployments. This paper demonstrates that computational indistinguishability between normal and steganographic output can be achieved using only a seed-based model API, with no distribution access required.

2026-bai-provable-secure-steganography Abstract / §1 Introduction traffic-shapeml-classifier

Chameleon's many-to-many randomized traffic morphing blocks DAAE by eliminating the stable origin→defended-trace mapping that DAAE exploits. Under DAAE-based RF attacks on GTT23, Chameleon limits attack precision to 40.68% and F1-score to 35.19%, compared with 80.64%/70.30% for Palette and 89.82%/88.22% for Adaptive Tamaraw. The defense works by randomly mapping each webpage trace to one of multiple candidate traces, and allowing different webpages to share morphing targets, so no fixed per-class transformation exists for the autoencoder to learn.

2026-cui-chameleon-robust-defense §V-C, Table IV website-fingerprintml-classifiertraffic-shape

NATA (Non-invasive Active Traffic-correlation Analysis) injects low-frequency bandwidth waveforms (sinusoidal, square-wave, triangular) into Tor TCP connections at an upstream gateway without endpoint compromise, payload decryption, or Tor-browser modification. BM-Net, a selective state-space classifier trained on the exit-side observations, achieves a 99.65% binary detection F1 score distinguishing watermarked from natural traffic on a 20,000-trace real-world dataset.

2026-fan-activeflowmark-assessing-tor §IV, §VI.D, Table III flow-correlationtraffic-shapeml-classifier

BM-Net achieves a 99.65% binary detection F1 score for distinguishing bandwidth-watermarked Tor flows from natural traffic, outperforming all evaluated baselines (next best: TikTok at 75.96% F1). The accuracy gap stems from active perturbation imposing a deterministic low-frequency throughput constraint rather than relying on subtle natural metadata, making the detection task fundamentally easier than passive website fingerprinting.

2026-fan-activeflowmark-assessing-tor §VI-D, Table III–IV flow-correlationtraffic-shapeml-classifier

BM-Net achieves a 99.65% binary detection F1 score distinguishing watermarked from natural Tor flows, and a 97.5% macro-F1 score for fine-grained modulation classification across sinusoidal, square-wave, and triangular patterns. The fine-grained test set contains 201 held-out samples collected from ten clients across five geographic regions (Europe, North America, Australia, Southeast Asia, East Asia), with training traces including traffic collected under WTF-PAD and Walkie-Talkie defenses.

2026-fan-activeflowmark-assessing-tor §VI-D, Table III, Table V flow-correlationml-classifiertraffic-shape