Issue No. 10 - Oct. (2013 vol. 24)
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/TPDS.2012.316
Joao V. Gomes , University of Beira Interior, Portugal
Pedro R.M. Inacio , University of Beira Interior, Portugal
Manuela Pereira , University of Beira Interior, Portugal
Mario M. Freire , University of Beira Interior, Portugal
Paulo P. Monteiro , Nokia Siemens Networks Portugal, S. A. with University of Aveiro and Instituto de Telecomunicações
Voice over Internet Protocol (VoIP) applications based on peer-to-peer (P2P) communications have been experiencing considerable growth in terms of number of users. To overcome filtering policies or protect the privacy of their users, most of these applications implement mechanisms such as protocol obfuscation or payload encryption that avoid the inspection of their traffic, making it difficult to identify its nature. The incapacity to determine the application that is responsible for a certain flow raises challenges for the effective management of the network. In this paper, a new method for the identification of VoIP sessions is presented. The proposed mechanism classifies the flows, in real-time, based on the speech codec used in the session. To make the classification lightweight, the behavioral signatures for each analyzed codec were created using only the lengths of the packets. Unlike most previous approaches, the classifier does not use the lengths of the packets individually. Instead, it explores their level of heterogeneity in real time, using entropy to emphasize such feature. The results of the performance evaluation show that the proposed method is able to identify VoIP sessions accurately and simultaneously recognize the used speech codec.
Payloads, Entropy, Protocols, Speech codecs, Phase change materials, packet-switching networks, Data communications, distributed applications, network communications, network management, network monitoring
P. P. Monteiro, M. M. Freire, J. V. Gomes, M. Pereira and P. R. Inacio, "Identification of Peer-to-Peer VoIP Sessions Using Entropy and Codec Properties," in IEEE Transactions on Parallel & Distributed Systems, vol. 24, no. , pp. 2004-2014, 2013.