Home > Ask the Security Experts > Network Security Questions & Answers > Why does Skype connect to so many servers?
Ask The Security Expert: Questions & Answers
EMAIL THIS

Why does Skype connect to so many servers?

Mike Chapple EXPERT RESPONSE FROM: Mike Chapple

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 01 October 2007
To make a simple call, it's almost as if Skype sets up 10-plus proxy servers to make its own virtual telephone network. Is it safe to have that many connections?

>
EXPERT RESPONSE
A telephone company or VoIP provider uses its own centralized servers, and the company is then responsible for keeping the servers up and running. To keep a connection alive, it's sufficient to establish a single connection to the business-managed server.

Skype, however, is a peer-to-peer service that uses a distributed network of "supernodes" to facilitate communication throughout the world.

Skype's supernodes are simply other Skype users that have public IP addresses. When they connect to Skype, the network chooses them to be a supernode and then takes advantage of their bandwidth and computing resources to serve other Skype users. This "volunteerism" is allowed under the terms of the Skype user agreement. Using volunteer systems introduces reliability concerns. The owner of such a system may turn it off or disconnect it from the network at any time. Therefore, you may need to connect to more than one supernode to facilitate your communication. There's also the possibility that your system has been "volunteered" as a supernode, an action that could cause your system to begin routing calls for other Skype users on the Internet.

I've loaded my response with "maybes" and "possibilities" because Skype is a proprietary, closed-source tool, and its creators do not publish the technical details of their protocol. This is one of my biggest problems with Skype; I simply don't like the idea of accepting an agreement that allows someone else to use my computer, but does not disclose the precise details of what's happening. For a detailed look at the potential security risks that applications like Skype pose to both the client and the enterprise, I recommend reading my tip, Skype: Its dangers and how to protect against them.

More information:

  • Learn what the recent Skype outage revealed about VoIP security.
  • Check out SearchSecurity.com's VoIP Security Learning Guide.


  • Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


    RELATED CONTENT
    Network Security
    What are the differences between intrusion detection and intrusion prevention?
    Will there be DMZ routing issues if several firewalls serve as the default gateway?
    Should tunnel connections be initiated from an ISP to a internal data center, or vice versa?
    What are the top LAN security issues in a client-server network environment?
    What warning signs will indicate the presence of a P2P botnet?
    What reporting tools are available for an enterprise IDS?
    Is it possible to allow select access to IP addresses using Windows Server 2003?
    Is an IPsec VPN necessary when connecting remote servers that process financial transactions?
    What are best practices for creating an IDS and maintaining a signature database?
    What are the best ways to hide system information from network scanning software?

    VoIP Security
    VoIP tools, attacks could increase threat
    Cisco warns of security appliance flaws
    Will VoIP attacks result in more than just spam?
    Has FFIEC made any VoIP-specific mandates?
    Enterprise security in 2008: Addressing emerging threats like VoIP and virtualization
    Securing VoIP Networks: Threats, Vulnerabilities and Countermeasures
    Cisco issues CallManager security update
    Skype outage highlights VoIP issues
    Will deploying VoIP on an 802.1x network create security problems?
    Black Hat 2007: VoIP security reaches tipping point
    VoIP Security Research

    Network Device Management
    Virtual network tool gives firm view into virtualized environment
    Cisco warns of security appliance flaws
    Product Review: LogRhythm
    Product Review: Cymphonix's Network Composer
    Screencast: How to use Nipper to create network security reports
    Kaminsky: DNS issue still major threat
    Researchers develop lightweight Cisco IOS rootkit
    Vendors rally to repair dangerous DNS flaw
    Cisco warns of UCM flaws
    Embedding security has drawbacks says TippingPoint chief architect

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    5 terms you need to know before you employ VoIP  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    Targeted Security Channel Tips for Resellers, Integrators and Consultants
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




    All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts