Binary executable file similarity calculation using function matching
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Kim, TaeGuen | - |
dc.contributor.author | Lee, Yeo Reum | - |
dc.contributor.author | Kang, BooJoong | - |
dc.contributor.author | Im, Eul Gyu | - |
dc.date.accessioned | 2022-07-10T09:44:03Z | - |
dc.date.available | 2022-07-10T09:44:03Z | - |
dc.date.created | 2021-05-12 | - |
dc.date.issued | 2019-02 | - |
dc.identifier.issn | 0920-8542 | - |
dc.identifier.uri | https://scholarworks.bwise.kr/hanyang/handle/2021.sw.hanyang/148373 | - |
dc.description.abstract | Nowadays, computer software is an essential part in our lives and is used in various fields. While software gives us convenience, it also causes many problems. Various research efforts are needed to defend against software plagiarism, attacks using malware/software, and so on. Analysis techniques of binary executable files can be applied to investigate and defend these problems. However, it is relatively hard to analyze binary executable files without source code information, because executable files only have the information for execution and discard semantic information during the compiling process. In this paper, we proposed a similarity calculation method for binary executable files, based on function matching techniques. Attributes of a function are extracted and these attributes are used to match functions of two binary files. Our function matching process is composed of three steps: the function name matching step, the N-tuple matching step, and the final n-gram-based matching step. After the function matching process is performed, the overall similarity is calculated based on similarities of matched functions. Experimental results show that similarity accuracy of our binary-based similarity calculation method is similar to those of a well-known source-code-based method, call MOSS. | - |
dc.language | 영어 | - |
dc.language.iso | en | - |
dc.publisher | SPRINGER | - |
dc.title | Binary executable file similarity calculation using function matching | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Im, Eul Gyu | - |
dc.identifier.doi | 10.1007/s11227-016-1941-2 | - |
dc.identifier.scopusid | 2-s2.0-85004140592 | - |
dc.identifier.wosid | 000460063500007 | - |
dc.identifier.bibliographicCitation | JOURNAL OF SUPERCOMPUTING, v.75, no.2, pp.607 - 622 | - |
dc.relation.isPartOf | JOURNAL OF SUPERCOMPUTING | - |
dc.citation.title | JOURNAL OF SUPERCOMPUTING | - |
dc.citation.volume | 75 | - |
dc.citation.number | 2 | - |
dc.citation.startPage | 607 | - |
dc.citation.endPage | 622 | - |
dc.type.rims | ART | - |
dc.type.docType | Article | - |
dc.description.journalClass | 1 | - |
dc.description.isOpenAccess | N | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalResearchArea | Engineering | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Hardware & Architecture | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Theory & Methods | - |
dc.relation.journalWebOfScienceCategory | Engineering, Electrical & Electronic | - |
dc.subject.keywordPlus | Calculations | - |
dc.subject.keywordPlus | Computer crime | - |
dc.subject.keywordPlus | Semantics | - |
dc.subject.keywordPlus | Analysis techniques | - |
dc.subject.keywordPlus | Binary files | - |
dc.subject.keywordPlus | Function matching | - |
dc.subject.keywordPlus | Malware analysis | - |
dc.subject.keywordPlus | Semantic information | - |
dc.subject.keywordPlus | Similarity calculation | - |
dc.subject.keywordPlus | Software plagiarisms | - |
dc.subject.keywordPlus | Source code information | - |
dc.subject.keywordPlus | Malware | - |
dc.subject.keywordAuthor | Malware analysis | - |
dc.subject.keywordAuthor | Function matching | - |
dc.subject.keywordAuthor | Binary file similarity | - |
dc.identifier.url | https://link.springer.com/article/10.1007/s11227-016-1941-2 | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
222, Wangsimni-ro, Seongdong-gu, Seoul, 04763, Korea+82-2-2220-1365
COPYRIGHT © 2021 HANYANG UNIVERSITY.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.