loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
International Conference on Semantic Computing (ICSC 2007)
A Software Birthmark Based on Dynamic Opcode n-gram
Irvine, California
September 17-September 19
ISBN: 0-7695-2997-6
ASCII Text
x 
 
Bin Lu, Fenlin Liu, Xin Ge, Bin Liu, Xiangyang Luo, "A Software Birthmark Based on Dynamic Opcode n-gram," International Conference on Semantic Computing, pp. 37-44, International Conference on Semantic Computing (ICSC 2007), 2007.
 
 
BibTex
x
 
@article{ 10.1109/ICSC.2007.15,
author = {Bin Lu and Fenlin Liu and Xin Ge and Bin Liu and Xiangyang Luo},
title = {A Software Birthmark Based on Dynamic Opcode n-gram},
journal ={International Conference on Semantic Computing},
volume = {0},
year = {2007},
isbn = {0-7695-2997-6},
pages = {37-44},
doi = {http://doi.ieeecomputersociety.org/10.1109/ICSC.2007.15},
publisher = {IEEE Computer Society},
address = {Los Alamitos, CA, USA},
}
 
 
RefWorks Procite/RefMan/Endnote
x 
 
TY - CONF
JO - International Conference on Semantic Computing
TI - A Software Birthmark Based on Dynamic Opcode n-gram
SN - 0-7695-2997-6
SP37
EP44
A1 - Bin Lu,
A1 - Fenlin Liu,
A1 - Xin Ge,
A1 - Bin Liu,
A1 - Xiangyang Luo,
PY - 2007
KW - null
VL - 0
JA - International Conference on Semantic Computing
ER -
 
Bin Lu, Zhengzhou Information Science and Technology Institute, China
Fenlin Liu, Zhengzhou Information Science and Technology Institute, China
Xin Ge, Zhengzhou Information Science and Technology Institute, China
Bin Liu, Zhengzhou Information Science and Technology Institute, China
Xiangyang Luo, Zhengzhou Information Science and Technology Institute, China
A kind of dynamic opcode n-gram software birthmark is proposed in this paper based on Myles? software birthmark (in which static opcode n-gram set is regarded as the software birthmark). The dynamic opcode n-gram set is regarded as the software birthmark which is extracted from the dynamic executable instruction sequence of the program. And the new birthmark can not only keep the advantages of feature n-gram set based on static opcode, but also possesses high robustness to code compression, encryption, packing. The algorithm which is to evaluate the similarity of the birthmarks of two programs is improved employing the theory of Probability and Statistic. As a result, the time complexity of the improved algorithm decreases to O(n) from O(n^2 ) , while the space complexity keeps unchanged. Finally, the validity of the scheme is proved by experiments.
Citation:
Bin Lu, Fenlin Liu, Xin Ge, Bin Liu, Xiangyang Luo, "A Software Birthmark Based on Dynamic Opcode n-gram," icsc, pp.37-44, International Conference on Semantic Computing (ICSC 2007), 2007
Usage of this product signifies your acceptance of the Terms of Use.