@inproceedings{MTMT:2622801, title = {Skype Traffic Identification}, url = {https://m2.mtmt.hu/api/publication/2622801}, author = {Perényi, Marcell Ádám and Gefferth, András and Dang Dinh, Trang and Molnár, Sándor}, booktitle = {50th Annual IEEE Global Telecommunications Conference, GLOBECOM 2007}, doi = {10.1109/GLOCOM.2007.81}, unique-id = {2622801}, abstract = {Skype uses strong encryption to secure communications inside the whole Skype network. Clients choose communication ports randomly. Therefore traditional port based or payload based identification of Skype traffic is not feasible. In this paper we introduce a novel flow dynamics based identification method to discover Skype host and voice calls as well. Our method uses only packet headers and the extracted flow level information. The whole identification process is scripted in Transact-SQL, thus it can be executed automatically. We also present the validation of the algorithm together with some analysis of the identification results.}, keywords = {Skype; traffic analysis; traffic identification}, year = {2007}, pages = {399-404} } @article{MTMT:2625093, title = {On the Identification and Analysis of P2P Traffic Aggregation}, url = {https://m2.mtmt.hu/api/publication/2625093}, author = {T D, Dang and Perényi, Marcell Ádám and Gefferth, András and Molnár, Sándor}, doi = {10.1007/11753810_51}, journal-iso = {LNCS}, journal = {LECTURE NOTES IN COMPUTER SCIENCE}, volume = {3976}, unique-id = {2625093}, issn = {0302-9743}, abstract = {The main purpose of this paper is twofold. First, we propose a novel identification method to reveal P2P traffic from traffic aggregation. Our method is based on a set of heuristics derived from the robust properties of P2P traffic. We show the high accuracy of the proposed algorithm based on a validation study. Second, several results of a comprehensive traffic analysis, focusing on the differences between P2P and non-P2P traffic, are reported in the paper. Our results show that the unique properties of P2P application traffic seem to fade away during aggregation and characteristics of the traffic will be similar to that of other non-P2P traffic aggregation.}, year = {2006}, eissn = {1611-3349}, pages = {606-617} }