1. A method, comprising: monitoring a plurality of traffic flows exchanged over a communication network; determining respective temporal traffic features for the monitored traffic flows; and identifying communication devices that participate in a same communication session, by finding a match between respective temporal traffic features of the traffic flows exchanged by the communication devices.