網路上加密通話之辨識設計實作—以Skype為例

Abstract

摘要近年來，網際網路成長快速，在VoIP消耗掉大量網路頻寬之時。如何在有限的頻寬下，讓頻寬作最有效的應用，成為相當重要的課題，但對於使用私有或加密的通訊協定的VoIP軟體來說，管理者往往無法控管，導致頻寬使用量無法預估或限制。\n本研究針對Skype加密通訊協定的語音傳輸作Skype session 辨識。經由Conntrack擷取已連線的Skype session後，以Pcap擷取session 特徵值，之後，使用K-平均法進行群聚分析和樣式識別。本研究現階段目的與成果是將Skype session 辨識出來，以便作為日後Skype通話頻寬保證的研究，確保使用VoIP時，具有良好的服務品質保證。

VoIP, being a significant portion of the network traffic today, constitutes a highly desirable class for identification. Accurate classification of proprietary VoIP traffic is a challenging problem, and becomes even more challenging when we are constrained to use only transport-layer header information and encrypted packets.\nThis research identifies encrypted Skype session by pattern recognition. Use the Conntrack to get information about established connections in the network and the Pcap to obtain session characteristics. Finally, K-means finishes clustering analysis and pattern recognition steps. Effective recognition of Skype session in our research will be the first step of encrypted VoIP traffic management in the near future, such as service quality guarantee of Skype.