Research Article
Enhanced Skype Traffic Identification
@INPROCEEDINGS{10.4108/valuetools.2007.1782, author={Marcell Per\^{e}nyi and S\^{a}ndor Moln\^{a}r}, title={Enhanced Skype Traffic Identification}, proceedings={2nd International ICST Conference on Performance Evaluation Methodologies and Tools}, proceedings_a={VALUETOOLS}, year={2010}, month={5}, keywords={Skype traffic identification analysis}, doi={10.4108/valuetools.2007.1782} }- Marcell Perényi
Sándor Molnár
Year: 2010
Enhanced Skype Traffic Identification
VALUETOOLS
ICST
DOI: 10.4108/valuetools.2007.1782
Abstract
Skype applies strong encryption to provide secure communication inside the whole Skype network. The communication ports of clients are chosen randomly. As a consequence, traditional port based or payload based identification of Skype traffic cannot be applied. In this paper we present a novel flow dynamics based identification method to discover both Skype hosts and voice calls. The method is based only on packet headers and extracted flow level information. This method is the second algorithm from our research. It has a significant improvement over our first method [1]. It can detect the randomly selected communication port of the Skype client, which makes the identification more reliable. The whole identification process is scripted in Transact-SQL, thus it can be executed automatically. We also present the validation of the new algorithm together with the analysis of the identification results.