An efficient technique for detecting Skype flows in UDP media streams

2013 IEEE International Conference on Advanced Networks and Telecommunications Systems, ANTS 2013

Volumn , Issue , 2013, Pages

  Sinam, Tejmani ^a   Singh, Irengbam Tilokchan ^a   Lamabam, Pradeep ^a   Ngasham, Nandarani ^a  

^a MANIPUR UNIVERSITY   (India)

Author keywords

[No Author keywords available]

Indexed keywords

INTERNET TELEPHONY; MEDIA STREAMING; REVERSE ENGINEERING;

ANTI-REVERSE ENGINEERINGS; END-TO-END COMMUNICATION; INTERNET TRAFFIC; MEDIA TRAFFIC; P2P ARCHITECTURE; PROPRIETARY PROTOCOLS; VOIP APPLICATIONS;

VOICE/DATA COMMUNICATION SYSTEMS;

EID: 84901044193     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ANTS.2013.6802872     Document Type: Conference Paper

References (32)

1. H. Wang, "Skype voip service-architecture and comparison," in INFOTECHSeminar Advanced Communication Services (ASC), 2005,p. 4.
2. J. Rosenberg, H. Schulzrinne, G. Camarillo, A. Johnston, J. Peterson,R. Sparks, M. Handley, and E. Schooler, "RFC 3261: SIP: SessionInitiation Protocol," IETF, Tech. Rep., 2002. [Online]. Available:www.ietf.org/rfc/ rfc3261.txt
3. H. Schulzrinne, S. Casner, R. Frederick, and V. Jacobson, "RFC3550: RTP: A Transport Protocol for Real-Time Applications," IETF,Tech. Rep., 2003, http://tools.ietf.org/html/rfc3550. [Online]. Available:www.ietf.org/rfc/ rfc3550.txt
4. M. Handley, V. Jacobson, and C. Perkins, "SDP: Session DescriptionProtocol," RFC 4566 (Proposed Standard), Internet Engineering TaskForce, Jul. 2006. [Online]. Available: http://www.ietf.org/rfc/rfc4566.txt
5. H. Schulzrinne and S. Casner, "RTP Profile for Audio and VideoConferences with Minimal Control," RFC 3551 (Standard), 2003,http://www.ietf.org/rfc/rfc3551.txt.
6. S. Baset and H. Schulzrinne, "An analysis of the skype peer-to-peerinternet telephony protocol," in INFOCOM, 2006.
7. D. Bonfiglio, M. Mellia, M. Meo, D. Rossi, and P. Tofanelli, "Revealingskype traffic: when randomness plays with you," SIGCOMM Comput.Commun. Rev., vol. 37, no. 4, pp. 37-48, Aug. 2007. [Online].Available: http://doi.acm.org/10.1145/1282427.1282386
8. S. Molńar and M. Peŕenyi, "On the identification and analysis of skypetraffic," Int. J. Commun. Syst., vol. 24, no. 1, pp. 94-117, Jan. 2011.[Online]. Available: http://dx.doi.org/10.1002/dac.1142
9. H. J. Kang, Z.-L. Zhang, S. Ranjan, and A. Nucci, "Sip-based voiptraffic behavior profiling and its applications," in Proceedings of the3rd annual ACM workshop on Mining network data, ser. MineNet '07.New York, NY, USA: ACM, 2007, pp. 39-44. [Online]. Available:http://doi.acm.org/10.1145/ 1269880.1269891
10. "Skype: A Practical Security Analysis," SANS, Tech. Rep. [Online].Available: http://www.sans.org/reading\ room/whitepapers/voip/32918.php
11. D. Adami, C. Callegari, S. Giordano, M. Pagano, and T. Pepe, "Skypehunter:A real-time system for the detection and classification of skypetraffic," Int. J. Communication Systems, vol. 25, no. 3, pp. 386-403,2012.
12. J.-L. Costeux, F. Guyard, and A.-M. Bustos, "Detection and comparisonof rtp and skype traffic and performance." in GLOBECOM. IEEE,2006. [Online]. Available: http://dblp.uni-trier.de/db/conf/globecom/ globecom2006qrp.html#CosteuxGB06
13. S. Arena, R. Birke, M. Mellia, M. Petracca, C. Racca, and D. Rossi,"Multimedia and streaming traffic analysis," 2006, 3rd EuroNGI Workshopon New Trends in Modelling, Quantitative Methods and Measurements,Torino, Italy 22-23 June 2006.
14. C. Perkins and M. Westerlund, "Multiplexing rtp data and control packetson a single port", rfc 5761," 2010, http://tools.ietf.org/html/ rfc5761.
15. H. Schulzrinne, S. L. Casner, R. Frederick, and V. Jacobson, "Rtp:A transport protocol for real-time applications," Internet RFC 1889,January 1996.
16. M. Erdal and K. Hedayat, "Real-time transport protocol streamdetection system and method," Patent US 8 306 063, 11 06, 2012.[Online]. Available: http://www.patentlens.net/patentlens/patent/US\ 8306063/en/
17. R. Guntur, "Technique for identifying rtp based traffic in core routingswitches," Patent Application US 2009/0 135 834 A1, 05 28, 2009.[Online]. Available: http://www.patentlens.net/patentlens/patent/US\2009\ 0135834\ A1/en/
18. S. Ehlert and S. Petgang, "Analysis and signature of skype voip sessiontraffic," Fraunhofer FOKUS Technical report NGNI-SKYPE-06b, Tech.Rep., 2006.
19. D. Bonfiglio, M. Mellia, M. Meo, N. Ritacca, and D. Rossi, "Trackingdown skype traffic," in INFOCOM 2008. 27th IEEE InternationalConference on Computer Communications, Joint Conference of theIEEE Computer and Communications Societies, 13-18 April 2008,Phoenix, AZ, USA. IEEE, 2008, pp. 261-265.
20. D. Adami, C. Callegari, S. Giordano, M. Pagano, and T. Pepe, "Areal-time algorithm for skype traffic detection and classification," inNEW2AN, 2009, pp. 168-179.
21. "Tstat-skype traces," http://tstat.tlc.polito.it/traces-skype. shtml.
22. "Tstat-tcp statistic and analysis tool," http://tstat.tlc. polito.it/index.shtml.
23. F. Gringoli, L. Salgarelli, M. Dusi, N. Cascarano, F. Risso, and K. Claffy, "Gt: picking up the truth from the ground for internet traffic,"Computer Communication Review, vol. 39, no. 5, pp. 12-18, 2009.
24. "Napatech," http://www.napatech.com/.
25. C. Boulton, J. Rosenberg, G. Camarillo, and F. Aude, "NAT TraversalPractices for Client-Server SIP," IETF, Tech. Rep., 2011, http://www.rfc-editor.org/rfc/rfc6314.txt.
26. J. Rosenberg, "Interactive Connectivity Establishment (ICE): A Protocolfor Network Address Translator (NAT) Traversal for Offer/ AnswerProtocols," Internet Requests for Comment, RFC Editor, Fremont,CA, USA, Tech. Rep. 5245, Apr. 2010, http://www.rfc-editor.org/rfc/rfc5245.txt.
27. X. Marjou and A. Sollaud, "Application Mechanism for KeepingAlive the NAT Mappings Associated with RTP/RTP Control Protocol(RTCP) Flows," IETF, Tech. Rep., 2011, http://www.rfc-editor.org/info/rfc6263. [Online]. Available: www.ietf.org/rfc/rfc3550.txt
28. M. Handley and V. Jacobson, "RFC 2327: SDP: Session DescriptionProtocol," IETF, Tech. Rep., 1998, www.ietf.org/rfc/rfc2327.txt. [Online]. Available: www.ietf.org/rfc/rfc2327.txt
29. J. Lazzaro, "Framing Real-time Transport Protocol (RTP) and RTPControl Protocol (RTCP) Packets over Connection-Oriented Transport, "IETF, Tech. Rep., 2006, http://tools.ietf.org/html/rfc4571.
30. H. Schulzrinne, A. Rao, and R. Lanphier, "Real Time StreamingProtocol (RTSP)," Internet Engineering Task Force (IETF): RFC 2326,1998.
31. E. P. Freire, A. Ziviani, and R. M. Salles, "Detecting voip calls hidden inweb traffic," IEEE Transactions on Network and Service Management,vol. 5, no. 4, pp. 204-214, 2008.
32. R. Alshammari and A. N. Zincir-Heywood, "An investigation on theidentification of voip traffic: Case study on gtalk and skype," in CNSM,2010, pp. 310-313.