Software Birthmark Based on System Function Call Frequency and Basic Block Instruction

doi:10.3969/j.issn.1000-3428.2016.10.015

Abstract

Abstract: As unique internal properties,software birthmark is often used to detect the similarity between different software.On the basis of researching software birthmark,this paper proposes a new method combining two dynamic birthmarks with different granularity to be a new software birthmark.The coarse-graired birthmark is the system function called by the executing program and the call frequency,and the fine-grained birthmark is the set of basic block instruction when user-defined function is executing.The combination of the two birthmarks is the final software birthmark.Simulation experimental results show that compared with the method using single-granularity birthmark,the proposed method improves the credibility and the reliability of software birthmark,and it has stronger ability to resist attacks.

Key words: software birthmark, system function, basic block, similarity, credibility, reliability

摘要： 软件胎记作为软件独有的内部属性,常被用来检测不同软件之间的相似度。在研究软件胎记的基础上,提出一种将2种不同粒度级的动态胎记相结合的软件胎记提取方法。该方法以程序执行时调用的系统函数及其频率作为粗粒度级胎记,用户自定义函数执行时的指令基本块作为细粒度级胎记,将2种胎记相结合作为软件的最终胎记。仿真实验结果表明,与单一粒度级别的胎记方法相比,该方法提高了软件胎记的可信性和可靠性,具有更强的抗攻击能力。

关键词: 软件胎记, 系统函数, 基本块, 相似度, 可信性, 可靠性

CLC Number:

TP309

ZHANG Xing,XU Jiangfeng,LI Xiaoyang. Software Birthmark Based on System Function Call Frequency and Basic Block Instruction[J]. Computer Engineering, doi: 10.3969/j.issn.1000-3428.2016.10.015.

张杏,徐江峰,李晓阳. 基于系统函数调用频率与指令基本块的软件胎记[J]. 计算机工程, doi: 10.3969/j.issn.1000-3428.2016.10.015.

/ / Recommend / Download Citations

URL: http://www.ecice06.com/EN/10.3969/j.issn.1000-3428.2016.10.015

http://www.ecice06.com/EN/Y2016/V42/I10/86

References

参考文献［1］Tamada H,Nakamura M,Monden A,et al.Java Birthmarks-detecting the Software Theft［J］.IEICE Transactions on Information and Systems,2005,E88-D(1):2148-2158. ［2］Ginger M,Christian S C.K-gram Based Software Birth-marks［C］//Proceedings of ACM Symposium on Applied Computing.Santa Fe,USA:ACM Press,2005:314-318. ［3］邓小鸿,拜亚萌,黄斌,等.一种可检测Java程序盗版的动态胎记技术［J］.计算机工程与应用,2010,46(17):69-71,84. ［4］陈林,刘粉林,芦斌,等.基于k-gram频数的静态软件胎记［J］.计算机工程,2011,37(4):46-48. ［5］Liu Fenlin,Lu Bin,Chen Lin.A Software Birthmark Based on Weighted k-gram［C］//Proceedings of 2010 Conference on Intelligent Computing and Intelligent Systems.Washington D.C.,USA:IEEE Press,2010:400-405. ［6］马世鑫,刘粉林,罗向阳,等.基于互信息的k-gram软件胎记选取［J］.计算机工程,2012,38(22):43-46. ［7］罗养霞,房鼎益.基于聚类分析的软件胎记特征选择［J］.电子学报,2013,41(12):2334-2338. ［8］李菲菲,周清雷.基于信息增益的软件特征技术［J］.计算机应用研究,2014,31(7):2082-2084,2087. ［9］Myles G,Collberg C.Detecting Software Theft via Whole Program Path Birthmarks［C］//Proceedings of the 7th International Conference on Information Security.Washington D.C.,USA:IEEE Press,2004:404-415. ［10］Tamada H,Okamoto K,Nakam M,et al.Dynamic Software Birthmarks to Detect the Theft of Windows Appli-cations［C］//Proceedings of International Symposium on Future Software Technology.Washington D.C.,USA:IEEE Press,2004:125-136. ［11］孙光,樊晓平,刘钟理.扩展频繁执行路径上的n-gram软件胎记［J］.信息网络安全,2013(2):57-60. ［12］韩兰胜,高昆仑,赵保华,等.基于API函数及其参数相结合的恶意软件行为检测［J］.计算机应用研究,2013,30(11):3407-3410,3425. ［13］范铭,刘均,郑庆华,等.基于栈行为动态胎记的软件抄袭检测方法［J］.山东大学学报:理学版,2014:9-16. ［14］Lim H,Park H,Choi S,et al.Detecting Theft of Java Applications via a Static Birthmark Based on Weighted Stack Patterns［J］.IEICE Transactions on Information and Systems,2008,E91-D(9):2323-2339. ［15］Lim H,Park H,Choi S,et al.A Method for Detecting the Theft of Java Programs Through Analysis of the Control Flow Information［J］.Information and Software Technology,2009,51(9):1338-1350. ［16］周清雷,张凤萍.基于程序数据属性的联合软件特征［J］.计算机应用与软件,2014,31(4):308-311. 编辑索书志

[1]	Xiaodan CUI, Dawei LIU, Yifan LIU, Zhibin ZHAO, Yougui REN, Yongming YAN. Research and Implementation of Key Frame Summarization Model for News Short Video [J]. Computer Engineering, 2023, 49(8): 182-189.
[2]	Weifen TANG, Cuifang GAO. Dynamic Time Warping Algorithm with Adaptive Weighting of Extreme Points [J]. Computer Engineering, 2023, 49(7): 150-160.
[3]	Ziwei HUI, Kun HE, Ben FENG, Yao SU. Image Quality Assessment Based on Visual Characteristics [J]. Computer Engineering, 2023, 49(7): 189-195.
[4]	CHENG Xiaohui, LI Yu, KANG Yanping. Double Standard Pruning of Convolution Network Based on Feature Extraction of Intermediate Graph [J]. Computer Engineering, 2023, 49(3): 105-112.
[5]	YANG Zhenyu, WANG Lei, MA Bo, YANG Yating, DONG Rui, Azmat Anwar, WANG Zhen. A Cross-Lingual Distant Supervision Method for Uyghur and Chinese [J]. Computer Engineering, 2023, 49(2): 271-278.
[6]	LEI Lixiang, WU Zhihao, LIU Yu, ZHOU Zizhan. Click-Through Rate Prediction and Optimization Based on Intra-Field Features Similarity [J]. Computer Engineering, 2023, 49(2): 238-245.
[7]	HE Junfei, ZHANG Huibing, HU Xiaoli. Open Domain Answer Selection Model Fusing Double Matching-Focus [J]. Computer Engineering, 2023, 49(1): 303-310.
[8]	PAN Jinfeng, YIN Liju, GAO Mingliang, ZOU Guofeng. Low-Rank and Sparse Decomposition of Compressive Sensing Observation Signals [J]. Computer Engineering, 2022, 48(8): 234-239.
[9]	JIN Haibo, ZHAO Xinyue. High-Reliability Intrusion Detection Algorithm Under Conformal Prediction Framework [J]. Computer Engineering, 2022, 48(7): 130-140.
[10]	ZHOU Ruipeng, QIN Jin. Reinforcement Exploration Strategy Based on Best Sub-Strategy Memory [J]. Computer Engineering, 2022, 48(2): 106-112.
[11]	LU Yi, WANG Peng, WANG Wei. Time-Series Semantic Mining Algorithm Based on Sub-Series Similarity [J]. Computer Engineering, 2022, 48(10): 88-94.
[12]	ZENG Xi, HAN Hua, MA Yuanyuan. Naive Bayes Link Prediction Method Based on Motif [J]. Computer Engineering, 2022, 48(10): 95-102.
[13]	WANG Zhihe, CAO Xuyan, DU Hui. A Density Clustering Algorithm with Optimized Initial Points and Adaptive Radius [J]. Computer Engineering, 2022, 48(1): 51-59.
[14]	JIA Junjie, LIU Pengtao, CHEN Wanghu. Improved Matrix Factorization Algorithm Using Social Information for Recommendation [J]. Computer Engineering, 2021, 47(9): 97-105.
[15]	GE Junwei, YANG Guangxin. Spectral Clustering Algorithm for Density Adaptive Neighborhood Based on Shared Nearest Neighbors [J]. Computer Engineering, 2021, 47(8): 116-123.

Please choose a citation manager

Content to export