---
res:
  bibo_abstract:
  - In September 2025, over 100K internal documents (including code, communications,
    etc.) from Geedge Networks, a Chinese DPI company with ties to the Great Firewall
    of China, were leaked to the public. In this paper, we analyze the source code
    from this leak, focusing on Geedge Networks’ flagship product, the Tiangou Secure
    Gateway (TSG) firewall. Working across multiple repositories, we successfully
    build and run a local copy of TSG—revealing key aspects of its architecture, including
    the protocols it is capable of parsing and the format of blocking rules used to
    censor sites, proxies, and other resources. Finally, we extract several fingerprints
    from TSG, including custom random number generators and parsing idiosyncrasies
    that allow us to identify its use and similar deployments in the Great Firewall
    of China. This is the first time that the source code of a commercial DPI has
    been leaked, and our work is the first code analysis of a core firewall component
    used in national censorship infrastructure. This unprecedented investigation offers
    insights that can assist circumvention developers and Internet security researchers
    in further understanding the capabilities and limitations of modern censorship
    technology.@eng
  bibo_authorlist:
  - foaf_Person:
      foaf_givenName: Anna
      foaf_name: Ablove, Anna
      foaf_surname: Ablove
  - foaf_Person:
      foaf_givenName: Johnnie
      foaf_name: Walker, Johnnie
      foaf_surname: Walker
  - foaf_Person:
      foaf_givenName: Ben
      foaf_name: Wolin, Ben
      foaf_surname: Wolin
  - foaf_Person:
      foaf_givenName: Niklas
      foaf_name: Niere, Niklas
      foaf_surname: Niere
      foaf_workInfoHomepage: http://www.librecat.org/personId=63563
  - foaf_Person:
      foaf_givenName: Felix
      foaf_name: Graf Lange, Felix
      foaf_surname: Graf Lange
      foaf_workInfoHomepage: http://www.librecat.org/personId=67893
  - foaf_Person:
      foaf_givenName: Aaron
      foaf_name: Ortwein, Aaron
      foaf_surname: Ortwein
  - foaf_Person:
      foaf_givenName: Armin
      foaf_name: Huremagic, Armin
      foaf_surname: Huremagic
  - foaf_Person:
      foaf_givenName: Richa
      foaf_name: Priyanka, Richa
      foaf_surname: Priyanka
  - foaf_Person:
      foaf_givenName: Ali
      foaf_name: Zohaib, Ali
      foaf_surname: Zohaib
  - foaf_Person:
      foaf_givenName: Jade
      foaf_name: Sheffey, Jade
      foaf_surname: Sheffey
  - foaf_Person:
      foaf_givenName: Nico
      foaf_name: Heitmann, Nico
      foaf_surname: Heitmann
      foaf_workInfoHomepage: http://www.librecat.org/personId=74619
    orcid: 0009-0003-7687-7044
  - foaf_Person:
      foaf_givenName: J. Alex
      foaf_name: Halderman, J. Alex
      foaf_surname: Halderman
  - foaf_Person:
      foaf_givenName: Juraj
      foaf_name: Somorovsky, Juraj
      foaf_surname: Somorovsky
      foaf_workInfoHomepage: http://www.librecat.org/personId=83504
    orcid: 0000-0002-3593-7720
  - foaf_Person:
      foaf_givenName: Amir
      foaf_name: Houmansadr, Amir
      foaf_surname: Houmansadr
  - foaf_Person:
      foaf_givenName: Roya
      foaf_name: Ensafi, Roya
      foaf_surname: Ensafi
  - foaf_Person:
      foaf_givenName: Mingshi
      foaf_name: Wu, Mingshi
      foaf_surname: Wu
  - foaf_Person:
      foaf_givenName: Eric
      foaf_name: Wustrow, Eric
      foaf_surname: Wustrow
  dct_date: 2026^xs_gYear
  dct_isPartOf:
  - http://id.crossref.org/issn/978-1-939133-58-8
  dct_language: eng
  dct_title: Technical Analysis of the Geedge Networks Firewall Source Code Leak@
...