XUE Diwen

*SHB = Ho Sin Hang Engineering Building, The Chinese University of Hong Kong


Research Interest
  • Security-focused Internet Measurement
  • Traffic Analysis & Obfuscation
  • Privacy-Enhancing Technologies
  • Security of Network Protocols
  • Web Agent Security
  • Mis/DisInformation
Courses Taught

XUE Diwen 薛棣文教授

Assistant Professor
BA(NYU), PhD(U Michigan)
(852) 3943-5155
Room 707, SHB*

I’m an Assistant Professor in the Department of Information Engineering at The Chinese University of Hong Kong (CUHK). Before joining CUHK, I was a Research Fellow at the University of Michigan, Ann Arbor. My research sits at the intersection of Security & Privacy and Systems & Networks, seeking to understand how network adversaries behave and to build practical defenses for an increasingly adversarial Internet. I received my Ph.D. from the University of Michigan and my B.A. from New York University.

My work has been recognized by several awards, including the Internet Defense Prize, the IRTF Applied Networking Research Prize, and the USENIX Security Distinguished Paper. My current research interests include Internet measurement; Traffic analysis & Obfuscation; Privacy-enhancing Technologies (PETS); Security of network protocols; and Security of web agents.

Recent / Selected Publications
  • D. Xue, A. Huremagic, W. Wang, R. Sundara Raman, R. Ensafi, “Fingerprinting Deep Packet Inspection Devices by their Ambiguities,” ACM CCS, 2025.
  • D. Xue, R. Stanley, P. Kumar, R. Ensafi, “The Discriminative Power of Cross-layer RTTs in Fingerprinting Proxy Traffic,” NDSS, 2025.
  • D. Xue, M. Kallitsis, A. Houmansadr, R. Ensafi, “Fingerprinting Obfuscated Proxy Traffic with Encapsulated TLS Handshakes,” USENIX Security, 2024.
  • D. Xue, A. Ablove, R. Ramesh, G. Kwak-Danciu, R. Ensafi, “Bridging Barriers: A Survey of Challenges and Priorities in the Censorship Circumvention Landscape,” USENIX Security, 2024.
  • D. Xue, R. Ramesh, A. Jain, M. Kallitsis, J. Halderman, J. Crandall, R. Ensafi, “OpenVPN is Open to VPN Fingerprinting,” USENIX Security, 2022.
Research Interest

  • Security-focused Internet Measurement
  • Traffic Analysis & Obfuscation
  • Privacy-Enhancing Technologies
  • Security of Network Protocols
  • Web Agent Security
  • Mis/DisInformation
Courses Taught