From Packets to Patterns: Interpreting Encrypted Network Traffic as Longitudinal Behavioral Signals
Fuente:
arXiv
Guardado en:
| Autores principales: | , , , , , , , |
|---|---|
| Formato: | Preprint |
| Publicado: |
2026
|
| Materias: | |
| Acceso en línea: | |
| Etiquetas: |
Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
|
| _version_ | 1866915980705267712 |
|---|---|
| author | Mahmood, Rameen Shahawy, Omar El Barua, Souptik Beattie, Zachary Kaye, Jeffrey Xu, Xuhai "Orson'' Wu, Chao-Yi Huang, Danny Yuxing |
| author_facet | Mahmood, Rameen Shahawy, Omar El Barua, Souptik Beattie, Zachary Kaye, Jeffrey Xu, Xuhai "Orson'' Wu, Chao-Yi Huang, Danny Yuxing |
| contents | Human behavior is difficult to observe continuously at scale, yet it leaves measurable traces in everyday device use. We test whether encrypted smartphone network traffic -- a ubiquitous, always-on, passive sensing modality -- can passively capture behavioral patterns related to sleep, stress, and loneliness. We model shared behavioral structure using a transformer backbone with per-user adapters, allowing the model to represent both typical individual behavior and deviations from it. To make these representations interpretable, we apply a sparse autoencoder to extract behavioral features corresponding to distinct patterns of activity. We relate these features to sleep disturbance, stress, and loneliness using generalized estimating equations with Mundlak decomposition, separating between-person differences from within-person changes over time. We find that the three outcomes reflect distinct temporal structures: stress is primarily associated with stable between-person differences, loneliness with within-person variation, and sleep disturbance with a combination of both. Notably, these within-person dynamics are not captured by predefined network-traffic features, demonstrating the value of learned representations for longitudinal behavioral sensing. These results establish encrypted network traffic as a viable passive sensing modality, revealing interpretable behavioral dynamics -- particularly deviations from an individual's baseline -- that are not visible in raw traffic features. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2605_01616 |
| institution | arXiv |
| publishDate | 2026 |
| record_format | arxiv |
| spellingShingle | From Packets to Patterns: Interpreting Encrypted Network Traffic as Longitudinal Behavioral Signals Mahmood, Rameen Shahawy, Omar El Barua, Souptik Beattie, Zachary Kaye, Jeffrey Xu, Xuhai "Orson'' Wu, Chao-Yi Huang, Danny Yuxing Machine Learning Artificial Intelligence Computers and Society Networking and Internet Architecture C.2.3; I.2.6; J.3 Human behavior is difficult to observe continuously at scale, yet it leaves measurable traces in everyday device use. We test whether encrypted smartphone network traffic -- a ubiquitous, always-on, passive sensing modality -- can passively capture behavioral patterns related to sleep, stress, and loneliness. We model shared behavioral structure using a transformer backbone with per-user adapters, allowing the model to represent both typical individual behavior and deviations from it. To make these representations interpretable, we apply a sparse autoencoder to extract behavioral features corresponding to distinct patterns of activity. We relate these features to sleep disturbance, stress, and loneliness using generalized estimating equations with Mundlak decomposition, separating between-person differences from within-person changes over time. We find that the three outcomes reflect distinct temporal structures: stress is primarily associated with stable between-person differences, loneliness with within-person variation, and sleep disturbance with a combination of both. Notably, these within-person dynamics are not captured by predefined network-traffic features, demonstrating the value of learned representations for longitudinal behavioral sensing. These results establish encrypted network traffic as a viable passive sensing modality, revealing interpretable behavioral dynamics -- particularly deviations from an individual's baseline -- that are not visible in raw traffic features. |
| title | From Packets to Patterns: Interpreting Encrypted Network Traffic as Longitudinal Behavioral Signals |
| topic | Machine Learning Artificial Intelligence Computers and Society Networking and Internet Architecture C.2.3; I.2.6; J.3 |
| url | https://arxiv.org/abs/2605.01616 |