Abstract
Software homology plays an important role in intellectual property protection, malware analysis, and network attack traceback. Among many methods proposed by researchers, the structure-based method has been proved to have better detection and anti-obfuscation capabilities, but it is inefficiency on space-time complexity and difficult to be applied to large-scale software homology analysis. In this paper, we propose a parallel method to extract function call graph from source codes, and a new software structure information comparison algorithm. The approach transforms function call graph into the corresponding motifs as the features of the software, and calculates homology score by the algorithm which is quick and accurate for large-scale software based on software motifs. According to experiments on large-scale source codes, binary executable files and obfuscated software, the accuracy of homology detection is 90.00% for non-obfuscated software and 80.00% for obfuscated software.
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
Schedule a callDisclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.
