Detecting skype flows in Web traffic

NOMS 2008 - IEEE/IFIP Network Operations and Management Symposium: Pervasive Management for Ubiquitous Networks and Services

Volumn , Issue , 2008, Pages 89-96

  Freire, Emanuel P ^a   Ziviani, Artur ^b   Salles, Ronaldo M ^a  

^a MILITARY INSTITUTE OF ENGINEERING   (Brazil)

^b LABORATÓRIO NACIONAL DE COMPUTAÇÃO CIENTÍFICA   (Brazil)

Author keywords

[No Author keywords available]

Indexed keywords

COMMUNICATION; COMPUTER SYSTEM FIREWALLS; INFORMATION SERVICES; INTERNET; INTERNET PROTOCOLS; INTERNET SERVICE PROVIDERS; INTERNET TELEPHONY; TELEPHONE SYSTEMS; TURBULENT FLOW; UBIQUITOUS COMPUTING; WORLD WIDE WEB;

CHALLENGING PROBLEM; COMMERCIAL INTERNET; DETECTION RATES; EXPERIMENTAL DATA; FALSE POSITIVE RATE; HIGH CAPACITY; NETWORK ELEMENTS; NETWORK MANAGERS; NETWORK OPERATIONS; NETWORK OPERATORS; REAL-WORLD; TCP PORTS; TRANSPORT PROTOCOL; UBIQUITOUS NETWORKS; WEB TRAFFIC;

NETWORK MANAGEMENT;

EID: 51849115621     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NOMS.2008.4575121     Document Type: Conference Paper

References (27)

1. IANA, "Port numbers," http://www.iana.org/assignments/port- numbers.
2. T. Karagiannis, K. Papagiannaki, and M. Faloutsos, "Blinc: multilevel traffic classification in the dark," in SIGCOMM'05: Proceedings of the 2005 ACM conference on Applications, technologies, architectures, and protocols for computer communications, 2005, pp. 229-240.
3. T. Karagiannis, A. Broido, M. Faloutsos, and K. claffy, "Transport layer identification of P2P traffic," in IMC '04: Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, 2004, pp. 121-134.
4. K. Sripanidkulchai, B. Maggs, and H. Zhang, "An analysis of live streaming workloads on the internet," in IMC '04: Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, 2004, pp. 41-54.
5. E. P. Freire, A. Ziviani, and R. M. Salles, "On metrics to distinguish skype flows from HTTP traffic," in LANOMS 2007: Proceedings of the 5th Latin American Network Operations and Management Symposium, Sep 2007.
6. D. Bonfiglio, M. Mellia, M. Meo, D. Rossi, and P. Tofanelli, "Revealing skype traffic: When randomness plays with you," in SIGCOMM'07: Proceedings of the 2007 ACM SIGCOMM, Aug 2007.
7. P. Barford and D. Plonka, "Characteristics of network traffic flow anomalies," in Proceedings of the ACM SIGCOMM Internet Measurement Workshop, Nov 2001.
8. A. Lakhina, M. Crovella, and C. Diot, "Characterization of network-wide anomalies in traffic flows," in IMC '04: Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, 2004, pp. 201-206.
9. _, "Mining anomalies using traffic feature distributions," in SIGCOMM' 05: Proceedings of the 2005 ACM conference on Applications, technologies, architectures, and protocols for computer communications, 2005, pp. 217-228.
10. A. Soule, K. Salamatian, and N. Taft, "Combining filtering and statistical methods for anomaly detection," in IMC '05: Proceedings of the 2005 Internet Measurement Conference, pp. 331-344.
11. B. A. Mah, "An empirical model of HTTP network traffic," in INFOCOM '97: Proceedings of 16th Joint Conference of the IEEE Computer and Communications Societies, 1997.
12. H.-K. Choi and J. O. Limb, "A behavioral model of web traffic," in ICNP '99: Proceedings of the 7th International Conference on Network Protocols. IEEE Computer Society, 1999, pp. 327-334.
13. A. Moore and K. Papagiannaki, "Toward the accurate identification of network applications," in Proceedings of the Passive and Active Measurement Workshop (PAM2005), March/April 2005.
14. L. Bernaille, R. Teixeira, I. Akodkenou, A. Soule, and K. Salamatian, "Traffic classification on the fly," ACM SIGCOMM Comput. Commun. Rev., vol. 36, no. 2, pp. 23-26, 2006.
15. J. Ma, K. Levchenko, C. Kreibich, S. Savage, and G. M. Voelker, "Unexpected means of protocol inference," in IMC '06: Proceedings of the 6th ACM SIGCOMM Internet Measurement Conference, 2006, pp. 313-326.
16. Y. J. Won, B.-C. Park, H.-T. Ju, M.-S. Kim, and J. W. Hong, "A hybrid approach for accurate application traffic identification," in 4th IEEE/IFIP Workshop on End-to-End Monitoring Techniques and Services, Apr 2006, pp. 1-8.
17. S. Baset and H. Schulzrinne, "An analysis of the skype peer-to-peer internet telephony protocol," in INFOCOM'06: Proceedings of the 25th IEEE International Conference on Computer Communications, Apr 2006.
18. S. Guha, N. Daswani, and R. Jain, "An experimental study of the skype peer-to-peer VoIP system," in IPTPS'06: Proceedings of the 5th International Workshop on Peer-to-Peer Systems, February 2006, pp. 1-6.
19. K. Suh, D. R. Figueiredo, J. Kurose, and D. Towsley, "Characterizing and detecting relayed traffic: A case study using skype," in INFOCOM' 06: Proceedings of the 25th IEEE International Conference on Computer Communications, Apr 2006.
20. S. Ehlert, S. Petgang, T. Magedanz, and D. Sisalem, "Analysis and signature of skype VoIP session traffic," in CIIT 2006: 4th IASTED International Conference on Communications, Internet, and Information Technology, Nov/Dec 2006, pp. 83-89.
21. N. Ye and Q. Chen, "An anomaly detection technique based on a chi-square statistic for detecting intrusions into information systems," Quality and Reliability Engineering International, vol. 17, no. 2, pp. 105-112, 2001.
22. J. M. Estévez-Tapiador, P. García-Teodoro, and J. E. Díaz-Verdejo, "Measuring normality in http traffic for anomaly-based intrusion detection," Computer Networks, vol. 45, no. 2, pp. 175-193, Jun 2004.
23. K. Pearson, "On the criterion that a given system of deviations from the probable in the case of a correlated system of variables is such that it can be reasonably supposed to have arisen from random sampling," Philos. Mag. Series 5, vol. 50, pp. 157-172, 1900.
24. F. J. Massey, Jr., "The Kolmogorov-Smirnov test of goodness of fit," Journal of the American Statistical Association, vol. 46, pp. 68-78, 1951.
25. X. Wang, S. Chen, and S. Jajodia, "Tracking anonymous peer-to-peer VoIP calls on the internet," in CCS'05: Proceedings of the 12th ACM conference on Computer and communications security, 2005, pp. 81-91.
26. V. Jacobson, C. Leres, and S. McCanne, "tcpdump," http://www.tcpdump.org/.
27. J. Elson, "tcpflow," http://www.circlemud.org/~jelson/software/ tcpflow/.