Function matching-based binary-level software similarity calculation
- Title
- Function matching-based binary-level software similarity calculation
- Author
- 임을규
- Keywords
- Binary Analysis; Static Analysis; Software Similarity; Call Graph; Function Matching; N-gram; Malware
- Issue Date
- 2013-10
- Publisher
- 2013 ACM New York, NY, USA
- Citation
- Proceedings of the 2013 Research in Adaptive & Convergent Systems, 2013, P.322-327
- Abstract
- This paper proposes a method to calculate similarities of software without any source code information. The proposed method can be used for various applications such as detecting the source code theft and copyright infringement, as well as locating updated parts of software including malware. To determine the similarities of software, we used an approach that matches similar functions included in software. Our function-based matching process is composed of two steps. In step 1, the structural information of call graph in binary file is used to match functions, and the matched functions are not processed in step 2 to reduce the number of detailed matching. In step 2, by using instruction mnemonics, N-gram similarity-based matching is performed. Using the structural matching proposed in this paper, about 30% improvement in the matching performance is achieved with the four-tuple matching which also reduces the false positive rate compared to previous studies. Our other experimental results showed that, in comparison to source code-based approaches, our proposed method has only about 3% difference in similarity calculation with real software samples. Therefore, we argue that our proposed method makes a contribution in the field of binary-based software similarity calculation.
- URI
- http://dl.acm.org/citation.cfm?doid=2513228.2513300https://repository.hanyang.ac.kr/handle/20.500.11754/73196
- ISBN
- 978-145032348-2
- DOI
- 10.1145/2513228.2513300
- Appears in Collections:
- COLLEGE OF ENGINEERING[S](공과대학) > COMPUTER SCIENCE(컴퓨터소프트웨어학부) > Articles
- Files in This Item:
There are no files associated with this item.
- Export
- RIS (EndNote)
- XLS (Excel)
- XML