mlsanityData to 14 Oct 2026

Robust Smartphone App Identification Via Encrypted Network Traffic Analysis

arXiv 1704.06099 ↗First posted 20 Apr 2017cs.CR cs.NIcited by 16

Not on the map. Why?

Abstract (arXiv)

The apps installed on a smartphone can reveal much information about a user, such as their medical conditions, sexual orientation, or religious beliefs. Additionally, the presence or absence of particular apps on a smartphone can inform an adversary who is intent on attacking the device. In this paper, we show that a passive eavesdropper can feasibly identify smartphone apps by fingerprinting the network traffic that they send. Although SSL/TLS hides the payload of packets, side-channel data such as packet size and direction is still leaked from encrypted connections. We use machine learning techniques to identify smartphone apps from this side-channel data. In addition to merely fingerprinting and identifying smartphone apps, we investigate how app fingerprints change over time, across devices and across different versions of apps. Additionally, we introduce strategies that enable our app classification system to identify and mitigate the effect of ambiguous traffic, i.e., traffic in common among apps such as advertisement traffic. We fully implemented a framework to fingerprint apps and ran a thorough set of experiments to assess its performance. We fingerprinted 110 of the most popular apps in the Google Play Store and were able to identify them six months later with up to 96% accuracy. Additionally, we show that app fingerprints persist to varying extents across devices and app versions.

Key facts. Cited by 16 papers in the map (data through 14 Oct 2026). First posted on arXiv 20 Apr 2017.

Builds on

No reference list yet.

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2022: 4; 2023: 3; 2024: 3; 2025: 3; 2026: 3.

16 papers.

Sort:

  1. 2022ET-BERT: A Contextualized Datagram Representation with Pre-training Transformers for Encrypted Traffic Classificationcited by 66
  2. 2022Fine-grained TLS services classification with reject optioncited by 14
  3. 2023On the Local Cache Update Rules in Streaming Federated Learningcited by 8
  4. 2024Lens: A Knowledge-Guided Foundation Model for Network Trafficcited by 7
  5. 2025Respond to Change with Constancy: Instruction-tuning with LLM for Non-I.I.D. Network Traffic Classificationcited by 4
  6. 2023DataZoo: Streamlining Traffic Classification Experimentscited by 2
  7. 2022Deep Learning for Encrypted Traffic Classification and Unknown Data Detectioncited by 1
  8. 2022Open-Source Framework for Encrypted Internet and Malicious Traffic Classificationcited by 1
  9. 2023A Testbed for Automating and Analysing Mobile Devices and their Applicationscited by 1
  10. 2024Efficiently and Effectively: A Two-stage Approach to Balance Plaintext and Encrypted Text for Traffic Classificationcited by 1
  11. 2025Fingerprinting Deep Learning Models via Network Traffic Patterns in Federated Learningcited by 1
  12. 2026PACC: Protocol-Aware Cross-Layer Compression for Compact Network Traffic Representationcited by 1
4 more
  1. 2024CBR -- Boosting Adaptive Classification By Retrieval of Encrypted Network Traffic with Out-of-distributioncited by 0
  2. 2025Building Transparency in Deep Learning-Powered Network Traffic Classification: A Traffic-Explainer Frameworkcited by 0
  3. 2026MambaNetBurst: Direct Byte-level Network Traffic Classification without Tokenization or Pretrainingcited by 0
  4. 2026Traffic-CBM: A Structurally Interpretable Multimodal Framework for Encrypted Traffic Classificationcited by 0