{"id":"1b98261a4a52a714451cef121fb0f2b5e521ba0481518289491bc77292731754","title":"ArXiv authors Sharma, Saini and Behl argue data splits can decide encrypted-traffic scores","argument":"Mayan Sharma, Kriti Saini and Devansh Behl argue that encrypted traffic classification scores can depend sharply on how data is divided for evaluation. On one public corpus, the same model and code scored macro-F1 0.992 with a commonly used split and 0.567 when flows from one packet capture stayed together. The authors say the problem is not random splitting alone: on a month of backbone QUIC traffic, server-disjoint splitting reduced macro-F1, while three other approaches were statistically indistinguishable from session-disjoint splitting. Which split matters, they report, depends on how a corpus was collected, and may not be apparent from its labels. Their proposed diagnostic uses single-identifier probes before model training; a decision tree using only capture identifiers scored 0.983 with a random split and 0.000 with session-disjoint splitting. The paper also reports that five pre-registered architectural claims failed, including a finding that removing every metric objective improved rejection of unknown applications. Across corpora, five labelled flows per class recovered 91% of the deficit from failed zero-shot transfer. The authors release splits, results, code and negative findings. These results concern the reported evaluations; the abstract does not establish how well the diagnostic works on other corpora.","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The evidence is the arXiv abstract, which reports selected results but does not provide the paper's full methods or detailed corpus descriptions. The abstract reports results on one public corpus and a month of backbone QUIC traffic; it does not establish how well the diagnostic generalizes to other corpora.","speaker":{"name":"Sharma, Mayan, Saini, Kriti, Behl, Devansh","roleAtSource":"Article author"},"source":{"title":"The Split Protocol Decides the Result: Re-Evaluating Encrypted Traffic Classification","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2611.06290","publishedAt":"2026-11-04","dateBasis":"Date basis not provided."},"evidence":[{"text":"On one public corpus, the same model and code received substantially different macro-F1 scores under two split protocols.","excerpt":"the same model and code score macro-F1 0.992 under the evaluation protocol standard in the literature and 0.567 under a protocol that keeps flows from one packet capture on one side of the split","url":"https://arxiv.org/abs/2611.06290","relationship":"Source-stated"},{"text":"The authors report that, on a month of backbone QUIC traffic, server-disjoint splitting reduced macro-F1, while random, temporal and client-disjoint splitting were statistically indistinguishable from session-disjoint splitting.","excerpt":"random, temporal and client-disjoint splitting are statistically indistinguishable from session-disjoint, while server-disjoint splitting costs 0.192 macro-F1","url":"https://arxiv.org/abs/2611.06290","relationship":"Source-stated"},{"text":"The authors propose single-identifier probes to identify a relevant split axis before training; a decision tree using only the capture identifier scored differently under random and session-disjoint splits.","excerpt":"A decision tree on the capture identifier alone reaches 0.983 under a random split and exactly 0.000 under session-disjoint splitting.","url":"https://arxiv.org/abs/2611.06290","relationship":"Source-stated"},{"text":"The paper reports that five pre-registered architectural claims failed, and that removing every metric objective improved rejection of unknown applications.","excerpt":"Five of our own pre-registered architectural claims fail: distance-based rejection of unknown applications beats softmax thresholding, but ablating every metric objective makes rejection better","url":"https://arxiv.org/abs/2611.06290","relationship":"Source-stated"},{"text":"Across corpora, five labelled flows per class recovered 91% of the deficit left by failed zero-shot transfer.","excerpt":"across corpora, five labelled flows per class recover 91% of the deficit left by failed zero-shot transfer.","url":"https://arxiv.org/abs/2611.06290","relationship":"Source-stated"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.06290","checkedAt":"2026-11-09T11:40:10.785Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"How reliably do single-identifier probes identify the relevant split axis across corpora collected in different ways?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"ArXiv authors Sharma, Saini and Behl argue data splits can decide encrypted-traffic scores","summary":"Mayan Sharma, Kriti Saini and Devansh Behl argue that encrypted traffic classification scores can depend sharply on how data is divided for evaluation. On one public corpus, the same model and code scored macro-F1 0.992 with a commonly used split and 0.567 when flows from one packet capture stayed together. The authors say the problem is not random splitting alone: on a month of backbone QUIC traffic, server-disjoint splitting reduced macro-F1, while three other approaches were statistically indistinguishable from session-disjoint splitting. Which split matters, they report, depends on how a corpus was collected, and may not be apparent from its labels. Their proposed diagnostic uses single-identifier probes before model training; a decision tree using only capture identifiers scored 0.983 with a random split and 0.000 with session-disjoint splitting. The paper also reports that five pre-registered architectural claims failed, including a finding that removing every metric objective improved rejection of unknown applications. Across corpora, five labelled flows per class recovered 91% of the deficit from failed zero-shot transfer. The authors release splits, results, code and negative findings. These results concern the reported evaluations; the abstract does not establish how well the diagnostic works on other corpora.","question":"How reliably do single-identifier probes identify the relevant split axis across corpora collected in different ways?","claims":[{"text":"On one public corpus, the same model and code received substantially different macro-F1 scores under two split protocols.","excerpt":"the same model and code score macro-F1 0.992 under the evaluation protocol standard in the literature and 0.567 under a protocol that keeps flows from one packet capture on one side of the split","support":"source-stated"},{"text":"The authors report that, on a month of backbone QUIC traffic, server-disjoint splitting reduced macro-F1, while random, temporal and client-disjoint splitting were statistically indistinguishable from session-disjoint splitting.","excerpt":"random, temporal and client-disjoint splitting are statistically indistinguishable from session-disjoint, while server-disjoint splitting costs 0.192 macro-F1","support":"source-stated"},{"text":"The authors propose single-identifier probes to identify a relevant split axis before training; a decision tree using only the capture identifier scored differently under random and session-disjoint splits.","excerpt":"A decision tree on the capture identifier alone reaches 0.983 under a random split and exactly 0.000 under session-disjoint splitting.","support":"source-stated"},{"text":"The paper reports that five pre-registered architectural claims failed, and that removing every metric objective improved rejection of unknown applications.","excerpt":"Five of our own pre-registered architectural claims fail: distance-based rejection of unknown applications beats softmax thresholding, but ablating every metric objective makes rejection better","support":"source-stated"},{"text":"Across corpora, five labelled flows per class recovered 91% of the deficit left by failed zero-shot transfer.","excerpt":"across corpora, five labelled flows per class recover 91% of the deficit left by failed zero-shot transfer.","support":"source-stated"}],"limitations":["The evidence is the arXiv abstract, which reports selected results but does not provide the paper's full methods or detailed corpus descriptions.","The abstract reports results on one public corpus and a month of backbone QUIC traffic; it does not establish how well the diagnostic generalizes to other corpora."],"mediaId":"f411cb7706bd0fa41b3270bbb35357c4594171eb821e94fe77c3b9a274716523","correctionReason":null,"id":"1b98261a4a52a714451cef121fb0f2b5e521ba0481518289491bc77292731754","publicationId":"deda022a-06bf-4ae6-807a-8090e4f8251a","version":1,"sourceUrl":"https://arxiv.org/abs/2611.06290","sourceTitle":"The Split Protocol Decides the Result: Re-Evaluating Encrypted Traffic Classification","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2026-11-04","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-11-05T05:06:32.020Z","createdAt":"2026-11-09T11:09:12.360Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"f411cb7706bd0fa41b3270bbb35357c4594171eb821e94fe77c3b9a274716523","kind":"article","url":"https://arxiv.org/abs/2611.06290","sourceUrl":"https://arxiv.org/abs/2611.06290","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-09T11:08:22.941Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.06290","checkedAt":"2026-11-09T11:40:10.785Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"f411cb7706bd0fa41b3270bbb35357c4594171eb821e94fe77c3b9a274716523","confidence":0.8700000000000001,"provider":"typesafe","model":"jev-1.13.0","inputHash":"f88e0c6a50212460e3581706d5fd81752b9be3e822c1e374b950adc450cad176","decidedAt":"2026-11-09T11:08:24.536Z"},"provenance":{"textHash":"7e48fce442aaef58c366cb143b8ad20419386b3d29cca643d4cd5098421d4f68","observationId":"9d45473c269a8909e76876a149e40cfbf3c3f6b747a42f5d9072e9414f9f241d","retrievedAt":"2026-11-09T11:08:22.678Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"287d5014-9c75-40f2-8825-393badb60ed9"},"reviewer":{"model":"gpt-6-luna","runId":"d3a84f62-6f2a-4239-89a4-d890273d3e3f"}},"audit":{"status":"uncertain","reviewedAt":"2026-11-09T11:09:12.360Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Sharma, Mayan","url":null,"kind":"unknown"},{"name":"Saini, Kriti","url":null,"kind":"unknown"},{"name":"Behl, Devansh","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Sharma, Mayan","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Sharma, Mayan","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.06290","locator":"head/meta[name=author|citation_author]"},"assertionId":"a228511d0564110b6a3db89241b72f744266ff77dd01062109fb8dab6a8b5540:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T11:40:10.785Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"a228511d0564110b6a3db89241b72f744266ff77dd01062109fb8dab6a8b5540","sourceUrl":"https://arxiv.org/abs/2611.06290","contentSha256":"baab3f2156fe38787ce313378eb7fc8b24ae4ddc9ee59ccd26734ace1d860aeb","textHash":"7e48fce442aaef58c366cb143b8ad20419386b3d29cca643d4cd5098421d4f68","observedAt":"2026-11-09T11:40:10.785Z"}},{"actor":{"name":"Saini, Kriti","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Saini, Kriti","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.06290","locator":"head/meta[name=author|citation_author]"},"assertionId":"a228511d0564110b6a3db89241b72f744266ff77dd01062109fb8dab6a8b5540:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T11:40:10.785Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"a228511d0564110b6a3db89241b72f744266ff77dd01062109fb8dab6a8b5540","sourceUrl":"https://arxiv.org/abs/2611.06290","contentSha256":"baab3f2156fe38787ce313378eb7fc8b24ae4ddc9ee59ccd26734ace1d860aeb","textHash":"7e48fce442aaef58c366cb143b8ad20419386b3d29cca643d4cd5098421d4f68","observedAt":"2026-11-09T11:40:10.785Z"}},{"actor":{"name":"Behl, Devansh","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Behl, Devansh","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.06290","locator":"head/meta[name=author|citation_author]"},"assertionId":"a228511d0564110b6a3db89241b72f744266ff77dd01062109fb8dab6a8b5540:participation:2","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T11:40:10.785Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"a228511d0564110b6a3db89241b72f744266ff77dd01062109fb8dab6a8b5540","sourceUrl":"https://arxiv.org/abs/2611.06290","contentSha256":"baab3f2156fe38787ce313378eb7fc8b24ae4ddc9ee59ccd26734ace1d860aeb","textHash":"7e48fce442aaef58c366cb143b8ad20419386b3d29cca643d4cd5098421d4f68","observedAt":"2026-11-09T11:40:10.785Z"}}],"participationCoverage":{"total":3,"returned":3,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2611.06290","snapshotId":"a228511d0564110b6a3db89241b72f744266ff77dd01062109fb8dab6a8b5540","contentSha256":"baab3f2156fe38787ce313378eb7fc8b24ae4ddc9ee59ccd26734ace1d860aeb","textHash":"7e48fce442aaef58c366cb143b8ad20419386b3d29cca643d4cd5098421d4f68","observedAt":"2026-11-09T11:40:10.785Z","basis":"publisher-page-metadata","sourceLinks":41,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/1b98261a4a52a714451cef121fb0f2b5e521ba0481518289491bc77292731754/source"}},"canonicalUrl":"https://escapemeridian.com/readings/arxiv-authors-sharma-saini-and-behl-argue-data-splits-can-1b98261a","formats":{"html":"/readings/arxiv-authors-sharma-saini-and-behl-argue-data-splits-can-1b98261a","markdown":"/readings/arxiv-authors-sharma-saini-and-behl-argue-data-splits-can-1b98261a.md","json":"/readings/arxiv-authors-sharma-saini-and-behl-argue-data-splits-can-1b98261a.json"},"attribution":"Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.","maintainedGuideLinks":[],"readerContext":{"version":"reader-context-v1","attribution":"Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.","terms":[{"id":"term-zero-shot","name":"Zero-shot","explanation":"Doing a task without worked examples (zero-shot) or with only a few examples given in the prompt (few-shot).","referenceUrl":"https://developers.google.com/machine-learning/glossary#zero-shot-prompting"}],"entities":[{"id":"arxiv","name":"arXiv","kind":"organization","context":"arXiv is a research manuscript repository where authors share papers that may not yet have been peer reviewed.","referenceUrls":["https://arxiv.org/","https://info.arxiv.org/help/api/index.html"],"path":"/entities/arxiv","json":"/entities/arxiv.json","markdown":"/entities/arxiv.md"}]},"researchQuestions":[],"withdrawn":false,"references":{"schemaVersion":1,"target":{"type":"reading","id":"1b98261a4a52a714451cef121fb0f2b5e521ba0481518289491bc77292731754","revision":"deda022a-06bf-4ae6-807a-8090e4f8251a","revisionKind":"publication-id","title":"ArXiv authors Sharma, Saini and Behl argue data splits can decide encrypted-traffic scores","url":"https://escapemeridian.com/readings/arxiv-authors-sharma-saini-and-behl-argue-data-splits-can-1b98261a"},"source":{"type":"source","id":"https://arxiv.org/abs/2611.06290","revision":"7e48fce442aaef58c366cb143b8ad20419386b3d29cca643d4cd5098421d4f68","revisionKind":"sha256-source-text","title":"The Split Protocol Decides the Result: Re-Evaluating Encrypted Traffic Classification","url":"https://arxiv.org/abs/2611.06290"},"status":"available","items":[],"next":null,"scope":"Explicit citations in public readings and public file attachments to this reading. Shared topics are not citations. Other artifact types need an explicit reference adapter."},"revisions":[{"id":"1b98261a4a52a714451cef121fb0f2b5e521ba0481518289491bc77292731754","title":"ArXiv authors Sharma, Saini and Behl argue data splits can decide encrypted-traffic scores","argument":"Mayan Sharma, Kriti Saini and Devansh Behl argue that encrypted traffic classification scores can depend sharply on how data is divided for evaluation. On one public corpus, the same model and code scored macro-F1 0.992 with a commonly used split and 0.567 when flows from one packet capture stayed together. The authors say the problem is not random splitting alone: on a month of backbone QUIC traffic, server-disjoint splitting reduced macro-F1, while three other approaches were statistically indistinguishable from session-disjoint splitting. Which split matters, they report, depends on how a corpus was collected, and may not be apparent from its labels. Their proposed diagnostic uses single-identifier probes before model training; a decision tree using only capture identifiers scored 0.983 with a random split and 0.000 with session-disjoint splitting. The paper also reports that five pre-registered architectural claims failed, including a finding that removing every metric objective improved rejection of unknown applications. Across corpora, five labelled flows per class recovered 91% of the deficit from failed zero-shot transfer. The authors release splits, results, code and negative findings. These results concern the reported evaluations; the abstract does not establish how well the diagnostic works on other corpora.","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The evidence is the arXiv abstract, which reports selected results but does not provide the paper's full methods or detailed corpus descriptions. The abstract reports results on one public corpus and a month of backbone QUIC traffic; it does not establish how well the diagnostic generalizes to other corpora.","speaker":{"name":"Sharma, Mayan, Saini, Kriti, Behl, Devansh","roleAtSource":"Article author"},"source":{"title":"The Split Protocol Decides the Result: Re-Evaluating Encrypted Traffic Classification","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2611.06290","publishedAt":"2026-11-04","dateBasis":"Date basis not provided."},"evidence":[{"text":"On one public corpus, the same model and code received substantially different macro-F1 scores under two split protocols.","excerpt":"the same model and code score macro-F1 0.992 under the evaluation protocol standard in the literature and 0.567 under a protocol that keeps flows from one packet capture on one side of the split","url":"https://arxiv.org/abs/2611.06290","relationship":"Source-stated"},{"text":"The authors report that, on a month of backbone QUIC traffic, server-disjoint splitting reduced macro-F1, while random, temporal and client-disjoint splitting were statistically indistinguishable from session-disjoint splitting.","excerpt":"random, temporal and client-disjoint splitting are statistically indistinguishable from session-disjoint, while server-disjoint splitting costs 0.192 macro-F1","url":"https://arxiv.org/abs/2611.06290","relationship":"Source-stated"},{"text":"The authors propose single-identifier probes to identify a relevant split axis before training; a decision tree using only the capture identifier scored differently under random and session-disjoint splits.","excerpt":"A decision tree on the capture identifier alone reaches 0.983 under a random split and exactly 0.000 under session-disjoint splitting.","url":"https://arxiv.org/abs/2611.06290","relationship":"Source-stated"},{"text":"The paper reports that five pre-registered architectural claims failed, and that removing every metric objective improved rejection of unknown applications.","excerpt":"Five of our own pre-registered architectural claims fail: distance-based rejection of unknown applications beats softmax thresholding, but ablating every metric objective makes rejection better","url":"https://arxiv.org/abs/2611.06290","relationship":"Source-stated"},{"text":"Across corpora, five labelled flows per class recovered 91% of the deficit left by failed zero-shot transfer.","excerpt":"across corpora, five labelled flows per class recover 91% of the deficit left by failed zero-shot transfer.","url":"https://arxiv.org/abs/2611.06290","relationship":"Source-stated"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.06290","checkedAt":"2026-11-09T11:40:10.785Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"How reliably do single-identifier probes identify the relevant split axis across corpora collected in different ways?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"ArXiv authors Sharma, Saini and Behl argue data splits can decide encrypted-traffic scores","summary":"Mayan Sharma, Kriti Saini and Devansh Behl argue that encrypted traffic classification scores can depend sharply on how data is divided for evaluation. On one public corpus, the same model and code scored macro-F1 0.992 with a commonly used split and 0.567 when flows from one packet capture stayed together. The authors say the problem is not random splitting alone: on a month of backbone QUIC traffic, server-disjoint splitting reduced macro-F1, while three other approaches were statistically indistinguishable from session-disjoint splitting. Which split matters, they report, depends on how a corpus was collected, and may not be apparent from its labels. Their proposed diagnostic uses single-identifier probes before model training; a decision tree using only capture identifiers scored 0.983 with a random split and 0.000 with session-disjoint splitting. The paper also reports that five pre-registered architectural claims failed, including a finding that removing every metric objective improved rejection of unknown applications. Across corpora, five labelled flows per class recovered 91% of the deficit from failed zero-shot transfer. The authors release splits, results, code and negative findings. These results concern the reported evaluations; the abstract does not establish how well the diagnostic works on other corpora.","question":"How reliably do single-identifier probes identify the relevant split axis across corpora collected in different ways?","claims":[{"text":"On one public corpus, the same model and code received substantially different macro-F1 scores under two split protocols.","excerpt":"the same model and code score macro-F1 0.992 under the evaluation protocol standard in the literature and 0.567 under a protocol that keeps flows from one packet capture on one side of the split","support":"source-stated"},{"text":"The authors report that, on a month of backbone QUIC traffic, server-disjoint splitting reduced macro-F1, while random, temporal and client-disjoint splitting were statistically indistinguishable from session-disjoint splitting.","excerpt":"random, temporal and client-disjoint splitting are statistically indistinguishable from session-disjoint, while server-disjoint splitting costs 0.192 macro-F1","support":"source-stated"},{"text":"The authors propose single-identifier probes to identify a relevant split axis before training; a decision tree using only the capture identifier scored differently under random and session-disjoint splits.","excerpt":"A decision tree on the capture identifier alone reaches 0.983 under a random split and exactly 0.000 under session-disjoint splitting.","support":"source-stated"},{"text":"The paper reports that five pre-registered architectural claims failed, and that removing every metric objective improved rejection of unknown applications.","excerpt":"Five of our own pre-registered architectural claims fail: distance-based rejection of unknown applications beats softmax thresholding, but ablating every metric objective makes rejection better","support":"source-stated"},{"text":"Across corpora, five labelled flows per class recovered 91% of the deficit left by failed zero-shot transfer.","excerpt":"across corpora, five labelled flows per class recover 91% of the deficit left by failed zero-shot transfer.","support":"source-stated"}],"limitations":["The evidence is the arXiv abstract, which reports selected results but does not provide the paper's full methods or detailed corpus descriptions.","The abstract reports results on one public corpus and a month of backbone QUIC traffic; it does not establish how well the diagnostic generalizes to other corpora."],"mediaId":"f411cb7706bd0fa41b3270bbb35357c4594171eb821e94fe77c3b9a274716523","correctionReason":null,"id":"1b98261a4a52a714451cef121fb0f2b5e521ba0481518289491bc77292731754","publicationId":"deda022a-06bf-4ae6-807a-8090e4f8251a","version":1,"sourceUrl":"https://arxiv.org/abs/2611.06290","sourceTitle":"The Split Protocol Decides the Result: Re-Evaluating Encrypted Traffic Classification","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2026-11-04","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-11-05T05:06:32.020Z","createdAt":"2026-11-09T11:09:12.360Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"f411cb7706bd0fa41b3270bbb35357c4594171eb821e94fe77c3b9a274716523","kind":"article","url":"https://arxiv.org/abs/2611.06290","sourceUrl":"https://arxiv.org/abs/2611.06290","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-11-09T11:08:22.941Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2611.06290","checkedAt":"2026-11-09T11:40:10.785Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"f411cb7706bd0fa41b3270bbb35357c4594171eb821e94fe77c3b9a274716523","confidence":0.8700000000000001,"provider":"typesafe","model":"jev-1.13.0","inputHash":"f88e0c6a50212460e3581706d5fd81752b9be3e822c1e374b950adc450cad176","decidedAt":"2026-11-09T11:08:24.536Z"},"provenance":{"textHash":"7e48fce442aaef58c366cb143b8ad20419386b3d29cca643d4cd5098421d4f68","observationId":"9d45473c269a8909e76876a149e40cfbf3c3f6b747a42f5d9072e9414f9f241d","retrievedAt":"2026-11-09T11:08:22.678Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"287d5014-9c75-40f2-8825-393badb60ed9"},"reviewer":{"model":"gpt-6-luna","runId":"d3a84f62-6f2a-4239-89a4-d890273d3e3f"}},"audit":{"status":"uncertain","reviewedAt":"2026-11-09T11:09:12.360Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Sharma, Mayan","url":null,"kind":"unknown"},{"name":"Saini, Kriti","url":null,"kind":"unknown"},{"name":"Behl, Devansh","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Sharma, Mayan","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Sharma, Mayan","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.06290","locator":"head/meta[name=author|citation_author]"},"assertionId":"a228511d0564110b6a3db89241b72f744266ff77dd01062109fb8dab6a8b5540:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T11:40:10.785Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"a228511d0564110b6a3db89241b72f744266ff77dd01062109fb8dab6a8b5540","sourceUrl":"https://arxiv.org/abs/2611.06290","contentSha256":"baab3f2156fe38787ce313378eb7fc8b24ae4ddc9ee59ccd26734ace1d860aeb","textHash":"7e48fce442aaef58c366cb143b8ad20419386b3d29cca643d4cd5098421d4f68","observedAt":"2026-11-09T11:40:10.785Z"}},{"actor":{"name":"Saini, Kriti","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Saini, Kriti","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.06290","locator":"head/meta[name=author|citation_author]"},"assertionId":"a228511d0564110b6a3db89241b72f744266ff77dd01062109fb8dab6a8b5540:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T11:40:10.785Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"a228511d0564110b6a3db89241b72f744266ff77dd01062109fb8dab6a8b5540","sourceUrl":"https://arxiv.org/abs/2611.06290","contentSha256":"baab3f2156fe38787ce313378eb7fc8b24ae4ddc9ee59ccd26734ace1d860aeb","textHash":"7e48fce442aaef58c366cb143b8ad20419386b3d29cca643d4cd5098421d4f68","observedAt":"2026-11-09T11:40:10.785Z"}},{"actor":{"name":"Behl, Devansh","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Behl, Devansh","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2611.06290","locator":"head/meta[name=author|citation_author]"},"assertionId":"a228511d0564110b6a3db89241b72f744266ff77dd01062109fb8dab6a8b5540:participation:2","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-11-09T11:40:10.785Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"a228511d0564110b6a3db89241b72f744266ff77dd01062109fb8dab6a8b5540","sourceUrl":"https://arxiv.org/abs/2611.06290","contentSha256":"baab3f2156fe38787ce313378eb7fc8b24ae4ddc9ee59ccd26734ace1d860aeb","textHash":"7e48fce442aaef58c366cb143b8ad20419386b3d29cca643d4cd5098421d4f68","observedAt":"2026-11-09T11:40:10.785Z"}}],"participationCoverage":{"total":3,"returned":3,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2611.06290","snapshotId":"a228511d0564110b6a3db89241b72f744266ff77dd01062109fb8dab6a8b5540","contentSha256":"baab3f2156fe38787ce313378eb7fc8b24ae4ddc9ee59ccd26734ace1d860aeb","textHash":"7e48fce442aaef58c366cb143b8ad20419386b3d29cca643d4cd5098421d4f68","observedAt":"2026-11-09T11:40:10.785Z","basis":"publisher-page-metadata","sourceLinks":41,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/1b98261a4a52a714451cef121fb0f2b5e521ba0481518289491bc77292731754/source"}}}],"audits":[{"publicationId":"deda022a-06bf-4ae6-807a-8090e4f8251a","verdict":"uncertain","findings":[{"dimension":"attribution","status":"pass","explanation":"The reading correctly credits Mayan Sharma, Kriti Saini and Devansh Behl as the arXiv authors and keeps the findings framed as their reports.","excerpt":"Authors:Mayan Sharma, Kriti Saini, Devansh Behl"},{"dimension":"summary","status":"uncertain","explanation":"The summary is faithful but hard for non-specialists to follow. Central terms are unexplained: encrypted traffic classification, macro-F1, packet capture, backbone QUIC, session/server-disjoint splits, single-identifier probes, metric objective and zero-shot transfer; tooltips are needed. It omits the stake that motivates the paper, that such classifiers are routinely reported at 95-99% accuracy. It also never says plainly that the split matters because related data can leak between training and test sets. Smallest repair: restore the 95-99% framing and add one plain sentence on why keeping a capture on one side of the split changes the score.","excerpt":"Encrypted traffic classifiers are routinely reported at 95-99% accuracy."},{"dimension":"date","status":"pass","explanation":"The originalPublished date of 2026-11-04 matches the v1 submission date. The feed date of Nov 5 is later and was correctly not used.","excerpt":"[Submitted on 4 Nov 2026]"},{"dimension":"support","status":"uncertain","explanation":"The five claims match the abstract. The second limitation says the abstract reports results on one public corpus plus QUIC traffic. However, the abstract describes one of two public corpora and reports cross-corpus few-shot results, so this understates the evaluation scope. Smallest repair: state that the headline gap was observed on one of two public corpora. The closing question is a reasonable open issue and not a leading claim.","excerpt":"We show that on one of two public corpora, the same model and code score macro-F1 0.992"},{"dimension":"media","status":"pass","explanation":"The selected media is the verified arXiv abstract page itself, the direct original source.","excerpt":null}],"createdAt":"2026-11-09T11:09:12.360Z","model":"anthropic/claude-opus-5.5"}],"correctionUrl":"https://escapemeridian.com/corrections/"}