Revealing skype traffic: when randomness plays with you
Abstract
Skype is a very popular VoIP software which has recently attracted the attention of the research community and network operators. Following a closed source and proprietary design, Skype protocols and algorithms are unknown. Moreover, strong encryption mechanisms are adopted by Skype, making it very difficult to even glimpse its presence from a traffic aggregate. In this paper, we propose a framework based on two complementary techniques to reveal Skypetraffic in real time. The first approach, based on Pearson'sChi-Square test and agnostic to VoIP-related trafficcharacteristics, is used to detect Skype's fingerprint from the packet framing structure, exploiting the randomness introduced at the bit level by the encryption process. Conversely, the second approach is based on a stochastic characterization of Skype traffic in terms of packet arrival rate and packet length, which are used as features of a decision process based on Naive Bayesian Classifiers.In order to assess the effectiveness of the above techniques, we develop an off-line cross-checking heuristic based on deep-packet inspection and flow correlation, which is interesting per se. This heuristic allows us to quantify the amount of false negatives and false positives gathered by means of the two proposed approaches: results obtained from measurements in different networks show that the technique is very effective in identifying Skype traffic. While both Bayesian classifier and packet inspection techniques are commonly used, the idea of leveraging on randomness to reveal traffic is novel. We adopt this to identify Skype traffic, but the same methodology can be applied to other classification problems as well.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Bonfiglio et al. [69] perform controlled experiments to reverse engineer the structure of Skype messages between two Skype clients and between a Skype client and a traditional PSTN phone.
“Bonfiglio et al. [69] perform controlled experiments to reverse engineer the structure of Skype messages between two Skype clients (E2E) and between a Skype client and a traditional PSTN phone (E2O).”
From A comprehensive survey on machine learning for networking: Evolution, applications and research opportunities (2018) · cites this paper as [69]
The combination of NB and χ2 classifiers has higher false negatives than the isolated classifiers because it disregards video and data transfers and correctly identifies only Skype flows that carry voice traffic.
“However, higher FNs are noticeable in comparison to the isolated classifiers, as the combination disregards video and data transfers, and correctly identify only those Skype flows that actually carry voice traffic.”
From A comprehensive survey on machine learning for networking: Evolution, applications and research opportunities (2018) · cites this paper as [69]
The NB classifier is effective in identifying all voice traffic, while the χ2 classifier accurately identifies all Skype traffic over UDP and all encrypted or compressed traffic over TCP.
“In the evaluation, the NB classifier is effective in identifying all voice traffic, while the χ 2 classifier accurately identifies all Skype traffic over UDP and all encrypted or compressed traffic over TCP.”
From A comprehensive survey on machine learning for networking: Evolution, applications and research opportunities (2018) · cites this paper as [69]
Jointly, NB and χ2 classifiers outperform the classifiers in isolation by detecting Skype voice traffic over UDP and TCP with nearly zero false positives.
“Jointly, NB and χ 2 classifier outperform the classifiers in isolation by detecting Skype voice traffic over UDP and TCP with nearly zero FP.”
From A comprehensive survey on machine learning for networking: Evolution, applications and research opportunities (2018) · cites this paper as [69]
Cites
RTP: A Transport Protocol for Real-Time Applications
Schulzrinne, H. G., Casner, S. L., Frederick, R., & Jacobson, V. L. (2003) · doi:10.17487/rfc3550 · Cited by 5,779 · see citing works
An Analysis of the Skype Peer-to-Peer Internet Telephony Protocol
Baset, S., & Schulzrinne, H. G. (2006) · doi:10.1109/infocom.2006.312 · Cited by 736 · see citing works
Carson, M., & Santay, D. J. (2003) · ACM SIGCOMM Computer Communication Review · doi:10.1145/956993.957007 · Cited by 489 · see citing works
Internet traffic classification using bayesian analysis techniques
Moore, A. W., & Zuev, D. (2005) · ACM SIGMETRICS Performance Evaluation Review · doi:10.1145/1071690.1064220 · Cited by 460 · see citing works
An Experimental Study of the Skype Peer-to-Peer VoIP System
Guha, S., & Daswani, N. (2005) · eCommons (Cornell University) · Cited by 405 · see citing works
Rescorla, E. (2000) · doi:10.17487/rfc2818 · Cited by 265 · see citing works
Quantifying Skype user satisfaction
Chen, K.-T., Huang, C., Polly Huang, B., & Lei, C. (2006) · ACM SIGCOMM Conference (SIGCOMM) · doi:10.1145/1159913.1159959 · Cited by 120 · see citing works
Biondi, P., & Desclaux, F. (2006) · Cited by 107 · see citing works
Measuring IP and TCP behavior on edge nodes with Tstat
Mellia, M., Cigno, R. L., & Neri, F. (2004) · Computer Networks · doi:10.1016/j.comnet.2004.06.026 · Cited by 80 · see citing works
Self-citationThe Secure Shell (SSH) Protocol Assigned Numbers
Lehtinen, S. (2006) · doi:10.17487/rfc4250 · Cited by 40 · see citing works
Flagged first, then by citations
1 of the 11 references couldn’t be matched to a known paper.
Cited by
Sorted by citations
Boutaba, R., Salahuddin, M. A., Limam, N., Ayoubi, S., Shahriar, N., Estrada-Solano, F., & Caicedo, O. M. (2018) · Journal of Internet Services and Applications · doi:10.1186/s13174-018-0087-2 · Cited by 1,036 · see citing works
Classifying IoT Devices in Smart Environments Using Network Traffic Characteristics
Sivanathan, A., Gharakheili, H. H., Loi, F., Radford, A., Wijenayake, C. A., Vishwanath, A., & Sivaraman, V. (2018) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2018.2866249 · Cited by 812 · see citing works
Robust Network Traffic Classification
Zhang, J., Chen, X., Xiang, Y., Zhou, W., & Wu, J. (2015) · IEEE/ACM Transactions on Networking · doi:10.1109/tnet.2014.2320577 · Cited by 391 · see citing works
Shen, M., Wei, M., Zhu, L., & Wang, M. (2017) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2017.2692682 · Cited by 200 · see citing works
Can encrypted traffic be identified without port numbers, IP addresses and payload inspection?
Alshammari, R., & Zincir-Heywood, N. (2010) · Computer Networks · doi:10.1016/j.comnet.2010.12.002 · Cited by 153 · see citing works
Website Fingerprinting and Identification Using Ordered Feature Sequences
Lu, L., Chang, E., & Chan, M. C. (2010) · Lecture notes in computer science · doi:10.1007/978-3-642-15497-3_13 · Cited by 126 · see citing works
Tunnel Hunter: Detecting application-layer tunnels with statistical fingerprinting
Dusi, M., Crotti, M., Gringoli, F., & Salgarelli, L. (2008) · Computer Networks · doi:10.1016/j.comnet.2008.09.010 · Cited by 125 · see citing works
Bagui, S. S., Fang, X., Kalaimannan, E., Bagui, S., & Sheehan, J. (2017) · Journal of Cyber Security Technology · doi:10.1080/23742917.2017.1321891 · Cited by 111 · see citing works
Inferring users' online activities through traffic analysis
Zhang, F., He, W., Liu, X., & Bridges, P. G. (2011) · Wireless Network Security · doi:10.1145/1998412.1998425 · Cited by 95 · see citing works
Traffic analysis of peer-to-peer IPTV communities
Silverston, T., Fourmaux, O., Alessio Botta, B., Dainotti, A., Pescapè, A., Ventre, G., & Salamatian, K. (2008) · Computer Networks · doi:10.1016/j.comnet.2008.09.024 · Cited by 75 · see citing works
A Look Behind the Curtain: Traffic Classification in an Increasingly Encrypted Web
Akbari, I., Salahuddin, M. A., Aniva, L., Limam, N., Boutaba, R., Mathieu, B., Moteau, S., & Tuffin, S. (2021) · Proceedings of the ACM on Measurement and Analysis of Computing Systems · doi:10.1145/3447382 · Cited by 72 · see citing works
Challenging statistical classification for operational usage
Pietrzyk, M., Costeux, J., Urvoy-Keller, G., & En-Najjary, T. (2009) · ACM Internet Measurement Conference (IMC) · doi:10.1145/1644893.1644908 · Cited by 57 · see citing works
Identification of VoIP encrypted traffic using a machine learning approach
Alshammari, R., & Zincir-Heywood, N. (2015) · Journal of King Saud University - Computer and Information Sciences · doi:10.1016/j.jksuci.2014.03.013 · Cited by 54 · see citing works
Nakao, A., & Du, P. (2018) · IEICE Transactions on Communications · doi:10.1587/transcom.2017cqi0002 · Cited by 51 · see citing works
Uncovering the Big Players of the Web
Gehlen, V., Finamore, A., Mellia, M., & Munafò, M. M. (2012) · Lecture notes in computer science · doi:10.1007/978-3-642-28534-9_2 · Cited by 50 · see citing works
Self-citationCheng, Y., Ji, X., Lu, T., & Xu, W. (2018) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3196494.3196509 · Cited by 50 · see citing works
Skype‐Hunter: A real‐time system for the detection and classification of Skype traffic
Adami, D., Callegari, C., Giordano, S., Pagano, M., & Pepe, T. (2011) · International Journal of Communication Systems · doi:10.1002/dac.1247 · Cited by 45 · see citing works
Detection and classification of peer-to-peer traffic
Gomes, J. V., Inácio, P. R. M., Pereira, M., Freire, M. M., & Monteiro, P. P. (2013) · ACM Computing Surveys · doi:10.1145/2480741.2480747 · Cited by 42 · see citing works
An investigation on the identification of VoIP traffic: Case study on Gtalk and Skype
Alshammari, R., & Zincir-Heywood, N. (2010) · International Conference on Network and Service Management (CNSM) · doi:10.1109/cnsm.2010.5691210 · Cited by 42 · see citing works
Rapid identification of Skype traffic flows
Branch, P., Heyde, A. A., & Armitage, G. J. (2009) · International Workshop on Network and Operating Systems Support for Digital Audio and Video (NOSSDAV) · doi:10.1145/1542245.1542266 · Cited by 39 · see citing works
Identify P2P traffic by inspecting data transfer behavior
Xu, K., Zhang, M., Ye, M., Chiu, D. M., & Wu, J. (2010) · Computer Communications · doi:10.1016/j.comcom.2010.01.005 · Cited by 36 · see citing works
Fine‐grained traffic classification based on functional separation
Park, B., Won, Y., Chung, J., Kim, M., & Hong, J. W. (2013) · International Journal of Network Management · doi:10.1002/nem.1837 · Cited by 34 · see citing works
Optimizing Deep Packet Inspection for High-Speed Traffic Analysis
Cascarano, N., Ciminiera, L., & Risso, F. (2010) · Journal of Network and Systems Management · doi:10.1007/s10922-010-9181-x · Cited by 34 · see citing works
Radio Frequency Traffic Classification Over WLAN
Kornycky, J., Abdul-Hameed, O., KONDOZ, A. M., & Barber, B. C. (2016) · IEEE/ACM Transactions on Networking · doi:10.1109/tnet.2016.2562259 · Cited by 34 · see citing works
Traffic classification in an increasingly encrypted web
Akbari, I., Salahuddin, M. A., Aniva, L., Limam, N., Boutaba, R., Mathieu, B., Moteau, S., & Tuffin, S. (2022) · Communications of the ACM · doi:10.1145/3559439 · Cited by 32 · see citing works
SLIC: Self-Learning Intelligent Classifier for network traffic
Divakaran, D. M., Su, L., Liau, Y. S., & Thing, V. L. L. (2015) · Computer Networks · doi:10.1016/j.comnet.2015.08.021 · Cited by 32 · see citing works
Classifying service flows in the encrypted skype traffic
Korczyński, M., & Duda, A. (2012) · International Conference on Communications · doi:10.1109/icc.2012.6364024 · Cited by 31 · see citing works
Unveiling Skype encrypted tunnels using GP
Alshammari, R., & Zincir-Heywood, N. (2010) · IEEE Congress on Evolutionary Computation (CEC) · doi:10.1109/cec.2010.5586288 · Cited by 29 · see citing works
An Entropy Based Encrypted Traffic Classifier
Mamun, M., Ghorbani, A. A., & Stakhanova, N. (2016) · Lecture notes in computer science · doi:10.1007/978-3-319-29814-6_23 · Cited by 28 · see citing works
QoE Assessment of Encrypted YouTube Adaptive Streaming for Energy Saving in Smart Cities
Pan, W., & Cheng, G. (2018) · IEEE Access · doi:10.1109/access.2018.2811416 · Cited by 24 · see citing works
Internet traffic classification using machine learning approach: Datasets validation issues
Ibrahim, H. A. H., Zuobi, O. R. A. L., Al-Namari, M. A., MohamedAli, G., & Abdalla, A. A. A. (2016) · Conference of Basic Sciences and Engineering Studies (SGCAC) · doi:10.1109/sgcac.2016.7458022 · Cited by 23 · see citing works
Distinguishing Between Smartphones and IoT Devices via Network Traffic
Hui, S., Wang, H., Xu, D., Wu, J., Li, Y., & Jin, D. (2021) · IEEE Internet of Things Journal · doi:10.1109/jiot.2021.3078879 · Cited by 23 · see citing works
A Real-Time Algorithm for Skype Traffic Detection and Classification
Adami, D., Callegari, C., Giordano, S., Pagano, M., & Pepe, T. (2009) · Lecture notes in computer science · doi:10.1007/978-3-642-04190-7_16 · Cited by 23 · see citing works
Gozar: NAT-Friendly Peer Sampling with One-Hop Distributed NAT Traversal
Payberah, A. H., Dowling, J., & Haridi, S. (2011) · Lecture notes in computer science · doi:10.1007/978-3-642-21387-8_1 · Cited by 21 · see citing works
Advanced Network Fingerprinting
Abdelnur, H. J., State, R., & Festor, O. (2008) · Lecture notes in computer science · doi:10.1007/978-3-540-87403-4_20 · Cited by 21 · see citing works
Live Traffic Monitoring with Tstat: Capabilities and Experiences
Finamore, A., Mellia, M., Meo, M., Munafò, M. M., & Rossi, D. (2010) · Lecture notes in computer science · doi:10.1007/978-3-642-13315-2_24 · Cited by 20 · see citing works
Self-citationA low complexity real-time Internet traffic flows neuro-fuzzy classifier
Rizzi, A., Iacovazzi, A., Baiocchi, A., & Colabrese, S. (2015) · Computer Networks · doi:10.1016/j.comnet.2015.09.011 · Cited by 19 · see citing works
Ahmed, M. E., Song, J. B., Han, Z., & Suh, D. Y. (2014) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2013.156 · Cited by 19 · see citing works
How Robust Can a Machine Learning Approach Be for Classifying Encrypted VoIP?
Alshammari, R., & Zincir-Heywood, N. (2014) · Journal of Network and Systems Management · doi:10.1007/s10922-014-9324-6 · Cited by 19 · see citing works
Low complexity, high performance neuro-fuzzy system for Internet traffic flows early classification
Rizzi, A., Colabrese, S., & Baiocchi, A. (2013) · International Wireless Communications and Mobile Computing Conference (IWCMC) · doi:10.1109/iwcmc.2013.6583538 · Cited by 18 · see citing works
A Look Behind the Curtain: Traffic Classification in an Increasingly Encrypted Web
Akbari, I., Salahuddin, M. A., Aniva, L., Limam, N., Boutaba, R., Mathieu, B., Moteau, S., & Tuffin, S. (2021) · ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems (SIGMETRICS) · doi:10.1145/3410220.3453921 · Cited by 17 · see citing works
Identify P2P Traffic by Inspecting Data Transfer Behaviour
Ye, M., Wu, J., Xu, K., & Chiu, D. M. (2009) · Lecture notes in computer science · doi:10.1007/978-3-642-01399-7_11 · Cited by 16 · see citing works
Identification of Peer-to-Peer VoIP Sessions Using Entropy and Codec Properties
Gomes, J. V., Inácio, P. R. M., Pereira, M., Freire, M. M., & Monteiro, P. P. (2013) · IEEE Transactions on Parallel and Distributed Systems · doi:10.1109/tpds.2012.316 · Cited by 16 · see citing works
Intelligent Network Slicing With Edge Computing for Internet of Vehicles
Du, P., Nakao, A., Zhong, L., & Onishi, R. (2021) · IEEE Access · doi:10.1109/access.2021.3112210 · Cited by 15 · see citing works
UDP traffic classification using most distinguished port
Zhang, Q., Ma, Y., Wang, J., & Li, X. (2014) · Asia-Pacific Network Operations and Management Symposium (APNOMS) · doi:10.1109/apnoms.2014.6996569 · Cited by 15 · see citing works
Xu, J., & Wah, B. W.-S. (2013) · ACM Multimedia Systems Conference (MMSys) · doi:10.1145/2483977.2484006 · Cited by 14 · see citing works
Traffic-Aware Optimal Spectral Access in Wireless Powered Cognitive Radio Networks
Ahmed, M. E., Kim, D. I., & Choi, K. W. (2017) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2017.2734660 · Cited by 14 · see citing works
VPN Network Traffic Classification Using Entropy Estimation and Time-Related Features
Balachandran, A., & Amritha, P. P. (2022) · Smart innovation, systems and technologies · doi:10.1007/978-981-16-3945-6_50 · Cited by 14 · see citing works
On the processing time for detection of Skype traffic
del Río, P. M. S., Ramos, J., García‐Dorado, J. L., Aracil, J., Sánchez, A. C., & Cutanda‐Rodriguez, M. (2011) · International Wireless Communications and Mobile Computing Conference (IWCMC) · doi:10.1109/iwcmc.2011.5982805 · Cited by 12 · see citing works
Traffic classification for managing Applications’ networking profiles
Alizadeh, H., & Zúquete, A. (2016) · Security and Communication Networks · doi:10.1002/sec.1516 · Cited by 12 · see citing works
Relationship Privacy Leakage in Network Traffics
Hu, J. Z., Lin, C., & Li, X. (2016) · International Conference on Computer Communications and Networks (ICCCN) · doi:10.1109/icccn.2016.7568566 · Cited by 12 · see citing works
Can Skype be used beyond video calling?
Exarchakos, G., Menkovski, V., & Liotta, A. (2011) · International Conference on Advances in Mobile Computing and Multimedia (MoMM) · doi:10.1145/2095697.2095725 · Cited by 11 · see citing works
SKYPE RESILIENCE TO HIGH MOTION VIDEOS
Exarchakos, G., Druda, L., Menkovski, V., Bellavista, P., & Liotta, A. (2013) · International Journal of Wavelets Multiresolution and Information Processing · doi:10.1142/s021969131350029x · Cited by 11 · see citing works
Only Header: a reliable encrypted traffic classification framework without privacy risk
Cui, S., Liu, J., Dong, C., Lü, Z., & Du, D. (2022) · Soft Computing · doi:10.1007/s00500-022-07450-9 · Cited by 11 · see citing works
Simple CART based real-time traffic classification engine on FPGAs
Soylu, T., Erdem, O., Carus, A., & Güner, E. S. (2017) · International Conference on ReConFigurable Computing and FPGAs (ReConFig) · doi:10.1109/reconfig.2017.8279820 · Cited by 11 · see citing works
A technique for classification of VoIP flows in UDP media streams using VoIP signalling traffic
Sinam, T., Singh, I. T., Lamabam, P., Ngasham, N., & Nandi, S. (2014) · IEEE International Advance Computing Conference · doi:10.1109/iadcc.2014.6779348 · Cited by 11 · see citing works
Rossi, D., Valenti, S., Veglia, P., Bonfiglio, D., Mellia, M., & Meo, M. (2008) · ACM SIGMETRICS Performance Evaluation Review · doi:10.1145/1453175.1453191 · Cited by 11 · see citing works
Self-citationLu, G., Zhang, H., & Ye, L. (2011) · Journal of Software · doi:10.3724/sp.j.1001.2011.03995 · Cited by 10 · see citing works
Markudova, D., Trevisan, M., Garza, P., Meo, M., Munafò, M. M., & Carofiglio, G. (2021) · ACM SIGMETRICS Performance Evaluation Review · doi:10.1145/3466826.3466841 · Cited by 9 · see citing works
Self-citationZero-Day Traffic Identification
Zhang, J., Chen, X., Xiang, Y., & Zhou, W. (2013) · Lecture notes in computer science · doi:10.1007/978-3-319-03584-0_16 · Cited by 9 · see citing works
García‐Dorado, J. L., del Río, P. M. S., Ramos, J., Muelas, D., Moreno, V., de Vergara, J. E. L., & Aracil, J. (2014) · International Journal of Network Management · doi:10.1002/nem.1858 · Cited by 8 · see citing works
Skype Traffic Classification Using Cost Sensitive Algorithms
Azab, A., Layton, R., Alazab, M., & Watters, P. (2013) · Cybercrime and Trustworthy Computing Workshop (CTC) · doi:10.1109/ctc.2013.11 · Cited by 8 · see citing works
Automatic Reverse Engineering of Unknown Security Protocols from Network Traces
Fan, Y., Zhu, Y., & Yuan, L. (2018) · IEEE International Conference on Computer and Communications (ICCC) · doi:10.1109/compcomm.2018.8780606 · Cited by 7 · see citing works
Bozorgi, A., Bahramali, A., Rezaei, F., Ghafari, A., Houmansadr, A., Soltani, R., Goeckel, D., & Towsley, D. (2022) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2022.3218191 · Cited by 7 · see citing works
An efficient technique for detecting Skype flows in UDP media streams
Sinam, T., Singh, I. T., Lamabam, P., & Ngasham, N. (2013) · IEEE International Conference on Advanced Networks and Telecommunications Systems · doi:10.1109/ants.2013.6802872 · Cited by 7 · see citing works
Identifying Skype Traffic in a Large-Scale Flow Data Repository
Trammell, B., Boschi, E., Procissi, G., Callegari, C., Dorfinger, P., & Schatzmann, D. (2011) · Lecture notes in computer science · doi:10.1007/978-3-642-20305-3_7 · Cited by 7 · see citing works
Sleeping mobile AP: a novel energy efficient Wifi tethering scheme
Jung, K.-H., Jeong, J.-P., & Suh, Y.-J. (2014) · Wireless Networks · doi:10.1007/s11276-014-0798-7 · Cited by 6 · see citing works
A novel blind traffic analysis technique for detection of WhatsApp VoIP calls
Sánchez, A. C., & Aracil, J. (2017) · International Journal of Network Management · doi:10.1002/nem.1968 · Cited by 6 · see citing works
Information-Entropy-Based DNS Tunnel Prediction
Homem, I., Papapetrou, P., & Dosis, S. (2018) · IFIP advances in information and communication technology · doi:10.1007/978-3-319-99277-8_8 · Cited by 6 · see citing works
Ilievski, G., & Latkoski, P. (2020) · Radioengineering · doi:10.13164/re.2020.0243 · Cited by 6 · see citing works
On SPIM detection in LTE networks
Das, S., Pourzandi, M., & Debbabi, M. (2012) · Conference proceedings - Canadian Conference on Electrical and Computer Engineering · doi:10.1109/ccece.2012.6334959 · Cited by 5 · see citing works
A tale of two outages: A study of the Skype network in distress
Trammell, B., & Schatzmann, D. (2011) · International Wireless Communications and Mobile Computing Conference (IWCMC) · doi:10.1109/iwcmc.2011.5982724 · Cited by 5 · see citing works
Traffic Identification in Semi-known Network Environment
Chen, X., Zhang, J., Xiang, Y., & Zhou, W. (2013) · IEEE International Conference on Computational Science and Engineering (CSE) · doi:10.1109/cse.2013.91 · Cited by 5 · see citing works
Is machine learning losing the battle to produce transportable signatures against VoIP traffic?
Alshammari, R., & Zincir-Heywood, N. (2011) · IEEE Congress on Evolutionary Computation (CEC) · doi:10.1109/cec.2011.5949799 · Cited by 5 · see citing works
Statistical network monitoring: Methodology and application to carrier-grade NAT
Bocchi, E., Khatouni, A. S., Traverso, S., Finamore, A., Munafò, M. M., Mellia, M., & Rossi, D. (2016) · Computer Networks · doi:10.1016/j.comnet.2016.06.018 · Cited by 5 · see citing works
Self-citationSnort Rule Detection for Countering in Network Attacks
Venkateswarlu, S., Kamesh, D. B. K., Sastry, J. K. R., & Sitara, S. N. M. (2017) · Advances in intelligent systems and computing · doi:10.1007/978-981-10-3153-3_57 · Cited by 5 · see citing works
Do we need a perfect ground-truth for benchmarking Internet traffic classifiers?
Oliveira, M. R., das Neves, J. C., Valadas, R., & Salvador, P. (2015) · IEEE Conference on Computer Communications (INFOCOM) · doi:10.1109/infocom.2015.7218634 · Cited by 5 · see citing works
Skype Traffic Identification Based on Trends-Aware Protocol Fingerprints
Wang, W., & Cheng, D. N. (2014) · Applied Mechanics and Materials · doi:10.4028/www.scientific.net/amm.543-547.2249 · Cited by 5 · see citing works
Effective Encrypted Traffic Analysis
Anand, N., Saifulla, M. A., Reddy, G., & Pavan, P. (2024) · Lecture notes in networks and systems · doi:10.1007/978-981-99-5015-7_33 · Cited by 4 · see citing works
A modular two-layer system for accurate and fast traffic classification
Hajikarami, F., Berenjkoub, M., & Manshaei, M. H. (2014) · International ISC Conference on Information Security and Cryptology (ISCISC) · doi:10.1109/iscisc.2014.6994039 · Cited by 4 · see citing works
Neto, M., Gomes, J. V., Freire, M. M., & Inácio, P. R. M. (2013) · IEEE International Symposium on Local and Metropolitan Area Networks (LANMAN) · doi:10.1109/lanman.2013.6528276 · Cited by 4 · see citing works
Voice over Internet Protocol (VoIP) Based IP PBX System Design
(2016) · International Journal of Science and Research (IJSR) · doi:10.21275/v5i2.14021604 · Cited by 4 · see citing works
Context-driven encrypted multimedia traffic classification on mobile devices
Hoque, M. A., Finley, B., Rao, A., Kumar, A., Hui, P., Ammar, M., & Tarkoma, S. (2022) · Pervasive and Mobile Computing · doi:10.1016/j.pmcj.2022.101737 · Cited by 3 · see citing works
The Impact of Evasion on the Generalization of Machine Learning Algorithms to Classify VoIP Traffic
Alshammari, R., & Zincir-Heywood, N. (2012) · International Conference on Computer Communications and Networks (ICCCN) · doi:10.1109/icccn.2012.6289243 · Cited by 3 · see citing works
Sensing multimedia contexts on mobile devices
Hoque, M. A., Rao, A., Kumar, A., Ammar, M., Hui, P., & Tarkoma, S. (2020) · International Workshop on Network and Operating Systems Support for Digital Audio and Video (NOSSDAV) · doi:10.1145/3386290.3396935 · Cited by 3 · see citing works
A Comparison of Classification Techniques for Detection of VoIP Traffic
Fonseca, H. T. D. S., Cruz, T., Simões, P., Monteiro, E., Silva, J. F., Gomes, P., & Centeio, N. (2014) · International Conference on Next Generation Mobile Applications, Services and Technologies (NGMAST) · doi:10.1109/ngmast.2014.32 · Cited by 3 · see citing works
Hoque, M. A., Nurmi, P., Siekkinen, M., Hui, P., & Tarkoma, S. (2020) · ACM Multimedia Systems Conference (MMSys) · doi:10.1145/3339825.3391854 · Cited by 3 · see citing works
Network Traffic Classification in an NFV Environment using Supervised ML Algorithms
Ilievski, G., & Latkoski, P. (2021) · Journal of Telecommunications and Information Technology · doi:10.26636/jtit.2021.153421 · Cited by 3 · see citing works
Tell Them from Me: An Encrypted Application Profiler
Mamun, M., Lu, R., & Gaudet, M. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-36938-5_28 · Cited by 3 · see citing works
iCamInspector: Classify Video Traffic and Detect IoT (Spy) Camera Flows
Chaudhary, P. R., Christopher, J. J., & Maiti, R. R. (2024) · Conference on Building a Secure & Empowered Cyberspace (BuildSEC) · doi:10.1109/buildsec64048.2024.00011 · Cited by 2 · see citing works
Do Twin Clouds Make Smoothness for Transoceanic Video Telephony?
Li, J., Li, Z., Liu, Y., & Zhang, Z.-L. (2015) · Proceedings of the International Conference on Parallel Processing · doi:10.1109/icpp.2015.35 · Cited by 2 · see citing works
Exploring Cognition Change of Skype Usage
Yen, Y.-C., Yen, C.-C., & Hsu, J.-S. (2008) · doi:10.1109/iccit.2008.262 · Cited by 2 · see citing works
Find Behaviors of Network Evasion and Protocol Obfuscation Using Traffic Measurement
Bai, Q., Xiong, G., & Zhao, Y. T. (2015) · Communications in computer and information science · doi:10.1007/978-3-662-47401-3_45 · Cited by 2 · see citing works
Real-Time Identification of Users under the New Structure of Skype
Jiang, Q., Hu, H., & Hu, G. (2016) · IEEE International Conference on Sensing, Communication, and Networking (SECON) · doi:10.1109/seconw.2016.7746809 · Cited by 2 · see citing works
Bharath, R., Rajalakshmi, P., & Desai, U. B. (2017) · IEEE International Conference on e-Health Networking, Applications and Services (Healthcom) · doi:10.1109/healthcom.2017.8210802 · Cited by 2 · see citing works
Context-driven Encrypted Multimedia Traffic Classification on Mobile Devices
Hoque, M. A., Finley, B., Rao, A., Kumar, A., Hui, P., Ammar, M., & Tarkoma, S. (2022) · IEEE International Conference on Pervasive Computing and Communications · doi:10.1109/percom53586.2022.9762389 · Cited by 2 · see citing works
AVOCAD: Adaptive Terrorist Comms Surveillance and Interception using Machine Learning
Azab, A., Maruatona, O. O., & Watters, P. (2019) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom/bigdatase.2019.00021 · Cited by 2 · see citing works
Evaluation of bulk traffic mitigation practices in campus network
Zhang, Q., Wang, J., & Li, X. (2010) · Asian Internet Engineering Conference · doi:10.1145/1930286.1930288 · Cited by 1 · see citing works
Identifying Skype nodes by NetFlow-based graph analysis
Jusko, J., & Řehák, M. (2012) · International Wireless Communications and Mobile Computing Conference (IWCMC) · doi:10.1109/iwcmc.2012.6314278 · Cited by 1 · see citing works
A qualitative study in consumer behavior of Skype internet phone
Yen, C.-C., & Hsu, J.-S. (2008) · doi:10.1109/ieem.2008.4738209 · Cited by 1 · see citing works
- Authors
- Bonfiglio, D., Mellia, M., Meo, M., Rossi, D., & Tofanelli, P.
- Affiliations
- Politecnico di Torino (IT)
- Télécom Paris (FR)
- Motorola (Italy) (IT)
- Venue
- ACM SIGCOMM Computer Communication Review
- Published
- 2007-08-27
- Volume
- 37
- Issue
- 4
- Pages
- 37-48
- ISSN
- 0146-4833 (ISSN-L)
- OpenAlex
- W3160447194
- Cited by
- 112
- References
- 11
- Citations by year
- 2026: 1 · 2024: 2 · 2022: 8 · 2021: 6 · 2020: 4 · 2019: 3 · 2018: 7 · 2017: 7 · 2016: 10 · 2015: 7 · 2014: 11 · 2013: 11 · 2012: 6
- FWCI
- 7.89
- Type
- journal article
- Language
- en
- Open access
- closed
- Locations
- ACM SIGCOMM Computer Communication Review (publishedVersion)
- PORTO@Iris (submittedVersion)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Internet Traffic Analysis and Secure E-voting
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Traffic and Congestion Control
- Keywords
- Pearson chi-square test, packet arrival rate, packet size, naive Bayesian classifier, deep packet inspection, flow correlation
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
