MIETT achieves state-of-the-art performance across five encrypted traffic classification datasets, outperforming prior foundation model approaches that focused on token-level relationships. The multi-dataset generalization demonstrates that packet-level interaction modeling captures structural features that are consistent across diverse traffic types rather than being dataset-specific artifacts.

Flow Contrastive Learning (FCL) enables MIETT to learn discriminative flow-level representations through self-supervision on unlabeled traffic, achieving state-of-the-art results across five classification datasets. The contrastive objective demonstrates strong generalization to unseen traffic types, reducing the labeled-data requirement for deploying an accurate encrypted traffic classifier.

Abstract detection

MIETT demonstrates that token-level approaches — treating raw hexadecimal byte sequences as tokens — fail to capture flow-level patterns arising from interactions between packets within a flow. The model's Two-Level Attention (TLA) architecture explicitly captures both within-packet byte patterns and cross-packet relationships, and this dual granularity is identified as the critical missing component in prior encrypted traffic classifiers.

Abstract detection

The Packet Relative Position Prediction (PRPP) pre-training task trains MIETT to predict the relative temporal ordering of packets within a flow, demonstrating that packet sequencing and positional structure are distinctive, learnable features in encrypted traffic even without payload content. This is a self-supervised signal requiring no labeled data.

Abstract detection

Stage 1 of the detection pipeline uses a lightweight heuristic: restrict analysis to IP addresses in "VPS-dense ASNs," which censors already target for resource-intensive inspection of fully-encrypted traffic. This pre-filter dramatically reduces the search space before applying the more expensive dual-role behavioral analysis. The evaluation was conducted without Stages 1 and 3 due to dataset limitations, meaning the reported 23% recall and 0.18% FPR are conservative lower bounds on the full pipeline's performance.

2026-almutairi-server §2.1, §2.2, §3.4 fully-encrypted-detectdpiml-classifier

Based on analysis of over 100,000 leaked Geedge Networks documents, InterSecLab (2025) found that Geedge supplied China-GFW-equivalent censorship and surveillance systems to Kazakhstan, Ethiopia, Pakistan, and Myanmar. The systems include deep packet inspection, real-time mobile user monitoring, fine-grained traffic control, regionally customizable censorship rules, and — per WIRED's reporting — ML-based extraction of metadata from encrypted traffic to determine whether a flow is likely from a VPN or circumvention tool.

2026-anon-2026-27-vpn §8 (InterSecLab / WIRED section) dpiml-classifierfully-encrypted-detecttraffic-shape

Adversarial pre-padding — prepending stochastic byte noise to packets — degrades ET-BERT encrypted traffic classification accuracy from >99% to 25.68%, exposing a structural vulnerability in all payload-byte-dependent detection systems. White-box adversarial attacks (Ayaka AH-MSI) additionally achieve evasion rates exceeding 99.5% against standard continuous-time sequence models via Manifold Shattering, where adversaries align malicious temporal distributions with benign baselines.

2026-ferrel-aegis-adversarial-entropy-guided §II, §VI-A dpiml-classifier

Explicitly disentangling packet headers (structured, low-entropy) from encrypted payloads (high-entropy, stochastic) into separate MoE branches yields consistent gains across six datasets: 86.85% F1 on 120-class TLS 1.3 traffic (CSTNET-TLS), 97.88% F1 on USTC-TFC2016 malware/benign flows, and 92.65% F1 on imbalanced IoT traffic (CIC-IoT2022), demonstrating that headers and payloads carry fundamentally different and independently exploitable discriminative signals.

2026-he-trafficmoe-heterogeneity-aware-mixture §III-A, §IV-B, Tables II–III ml-classifierdpifully-encrypted-detect

Striding with factor 4 (early downsampling) produces the largest single-factor degradation in the ablation study: average macro-F1 drops from 0.9909 to 0.9772 and cross-dataset variance increases from 4.77×10⁻⁵ to 4.51×10⁻⁴, with worst-case dataset performance falling to MIN 0.9524. Fine-grained byte order and short-range structure — protocol headers, payload signatures, repeated byte motifs — carry essential discriminative signal that stride-based aggregation destroys. This is a far larger degradation than any other design choice tested, including Mamba-1 versus Mamba-2.

2026-kulatilleke-mambanetburst-direct-byte-level §V-B, Table IV ml-classifierdpi

A burst of just 5 packets truncated to 320 bytes each (1600 bytes total) suffices for macro-F1 ≥0.9824 across all six benchmarks; the classification token reads from the final recurrent state after a 4-layer Mamba-2 stack processing this fixed-length prefix, with no additional flow-level or session-level context required.

2026-kulatilleke-mambanetburst-direct-byte-level §III-A, §V-A ml-classifierdpi