Zero-knowledge middleboxes (ZKMBs) are a recent paradigm in which clients get privacy
and middleboxes enforce policy: clients prove in zero knowledge that the plaintext …

This paper initiates research on zero-knowledge middleboxes (ZKMBs). A ZKMB is a
network middlebox that enforces network usage policies on encrypted traffic. Clients send …

Decentralized Identity (DID) is emerging as a new digital identity management scheme that
promises users complete control of their personal data and identification without central …

Network measurement probes the underlying network to support upper-level decisions such
as network management, network update, network maintenance, network defense and …

Cloud providers deploy telemetry tools in software to perform end-host network analytics.
Recent efforts show that sketches, a kind of approximate data structure, are a promising …

Network Function Virtualisation (NFV) advances the adoption of composable software
middleboxes. Accordingly, cloud data centres become major NFV vendors for enterprise …

This paper introduces SGX-Stream, a secure and efficient data analytics framework for data
streams using Intel SGX. SGX-Stream employs sketch algorithms in a cloud–edge …

Content providers increasingly utilise Content Delivery Networks (CDNs) to enhance users'
content download experience. However, this deployment scenario raises significant security …

It is increasingly popular for cloud providers to offer middlebox service that supports content-
based similarity detection for enterprises. However, redirecting network traffic to the cloud for …

Despite the fact that Rust is designed to be a secure programming language for system
programming, it is still vulnerable and exploitable due to its inclusion of an unsafe sub …