Archive:Skype protocol: Difference between revisions
No edit summary |
Rescuing 2 sources and tagging 0 as dead. #IABot (v1.6.5) |
||
| Line 43: | Line 43: | ||
===Protocol detection=== | ===Protocol detection=== | ||
Many networking and security companies claim to detect and control Skype's protocol for enterprise and carrier applications. While the specific detection methods used by these companies are often proprietary, [[Pearson's chi-squared test]] and stochastic characterization with [[Naive Bayes classifier]]s are two approaches that were published in 2007.<ref>[https://www.dpacket.org/articles/revealing-skype-traffic-when-randomness-plays-you Dario Bonfiglio et al. “Revealing Skype Traffic: When Randomness Plays with You,” ACM SIGCOMM Computer Communication Review, Volume 37:4 (SIGCOMM 2007), p. 37–48]</ref> | Many networking and security companies claim to detect and control Skype's protocol for enterprise and carrier applications. While the specific detection methods used by these companies are often proprietary, [[Pearson's chi-squared test]] and stochastic characterization with [[Naive Bayes classifier]]s are two approaches that were published in 2007.<ref>[https://www.dpacket.org/articles/revealing-skype-traffic-when-randomness-plays-you Dario Bonfiglio et al. “Revealing Skype Traffic: When Randomness Plays with You,” ACM SIGCOMM Computer Communication Review, Volume 37:4 (SIGCOMM 2007), p. 37–48] {{webarchive|url=https://web.archive.org/web/20110430074127/https://www.dpacket.org/articles/revealing-skype-traffic-when-randomness-plays-you |date=2011-04-30 }}</ref> | ||
==Obfuscation layer== | ==Obfuscation layer== | ||
| Line 97: | Line 97: | ||
==Legal issues== | ==Legal issues== | ||
[[Reverse engineering#Legality|Reverse engineering]] of the Skype protocol by inspecting/disassembling binaries is prohibited by the terms and conditions of Skype's license agreement. However European Union law allows reverse-engineering a computer program without getting a permission from an author for inter-operability purposes.<ref>[http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2009:111:0016:01:EN:HTML Directive 2009/24/EC of the European Parliament and of the Council of 23 April 2009 on the legal protection of computer programs]</ref> In the United States, the [[Digital Millennium Copyright Act]] provides protections for reverse engineering software for the purposes of interoperability with other software.<ref>17 U.S.C. Sec. 1201(f).</ref><ref>[[WIPO Copyright and Performances and Phonograms Treaties Implementation Act]]</ref> There are also legal precedents in the United States when the reverse-engineering is aimed at interoperability of file formats and protocols.<ref>Sega vs Accolade, 1992</ref><ref>Sony vs Connectix, 2000</ref><ref>[[Pamela Samuelson]] and Suzanne Scotchmer, "The Law and Economics of Reverse Engineering", 111 ''Yale Law Journal'' 1575-1663 (May 2002) | [[Reverse engineering#Legality|Reverse engineering]] of the Skype protocol by inspecting/disassembling binaries is prohibited by the terms and conditions of Skype's license agreement. However European Union law allows reverse-engineering a computer program without getting a permission from an author for inter-operability purposes.<ref>[http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2009:111:0016:01:EN:HTML Directive 2009/24/EC of the European Parliament and of the Council of 23 April 2009 on the legal protection of computer programs]</ref> In the United States, the [[Digital Millennium Copyright Act]] provides protections for reverse engineering software for the purposes of interoperability with other software.<ref>17 U.S.C. Sec. 1201(f).</ref><ref>[[WIPO Copyright and Performances and Phonograms Treaties Implementation Act]]</ref> There are also legal precedents in the United States when the reverse-engineering is aimed at interoperability of file formats and protocols.<ref>Sega vs Accolade, 1992</ref><ref>Sony vs Connectix, 2000</ref><ref>[[Pamela Samuelson]] and Suzanne Scotchmer, "The Law and Economics of Reverse Engineering", 111 ''Yale Law Journal'' 1575-1663 (May 2002) {{cite web |url=http://www.yalelawjournal.org/pdf/111-7/SamuelsonFINAL.pdf |title=Archived copy |accessdate=2015-03-17 |deadurl=yes |archiveurl=https://web.archive.org/web/20110716095222/http://www.yalelawjournal.org/pdf/111-7/SamuelsonFINAL.pdf |archivedate=2011-07-16 |df= }}</ref> | ||
In addition, some countries specifically permit a program to be copied for the purposes of reverse engineering.<ref>In the French "intellectual property" law set, there is an exception that allows any software user to reverse engineer it. See [http://legifrance.gouv.fr/affichCodeArticle.do?cidTexte=LEGITEXT000006069414&idArticle=LEGIARTI000006278920&dateTexte=20080329&categorieLien=cid ''code de la propriété intellectuelle''] {{fr}}. This law is the national implementation of a piece of EU legislation: [http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:31991L0250:EN:NOT Council Directive 91/250/EEC], since then repealed by [http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:32009L0024:EN:NOT Directive 2009/24/EC of the European Parliament and of the Council of 23 April 2009 on the legal protection of computer programs] which also has a very similar provision allowing reverse engineering/decompilation for the purposes of development and testing of independent but inter-operating programs).</ref> | In addition, some countries specifically permit a program to be copied for the purposes of reverse engineering.<ref>In the French "intellectual property" law set, there is an exception that allows any software user to reverse engineer it. See [http://legifrance.gouv.fr/affichCodeArticle.do?cidTexte=LEGITEXT000006069414&idArticle=LEGIARTI000006278920&dateTexte=20080329&categorieLien=cid ''code de la propriété intellectuelle''] {{fr}}. This law is the national implementation of a piece of EU legislation: [http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:31991L0250:EN:NOT Council Directive 91/250/EEC], since then repealed by [http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:32009L0024:EN:NOT Directive 2009/24/EC of the European Parliament and of the Council of 23 April 2009 on the legal protection of computer programs] which also has a very similar provision allowing reverse engineering/decompilation for the purposes of development and testing of independent but inter-operating programs).</ref> | ||