Statistical traffic identification method based on flow-level behavior for fair VoIP service

Many threats, such as denial-of-services (DoS) attacks and impersonation, can endanger an IP network where real-time communication, as represented by VoIP, requires a high level of reliability to work as a replacement for PSTN. Without making a concrete framework to protect the reliability of VoIP, we may soon start seeing cases whereby networks are illegally used by impersonating real-time communication. This paper proposes a technique, based on flow-level behavior, which aims to maintain communication confidentiality and identify applications of real-time communication, in a short period of time in order to eliminate applications that illegally use network resources. The paper shows favorable identification results were obtained from our experiments and also introduces issues we have discovered that must be resolved.