Code homology detection method based on code fingerprint and device thereof

A detection method and homology technology, applied in the direction of platform integrity maintenance, program control design, instruments, etc., can solve the problems of low detection efficiency and weak anti-confusing ability, so as to improve detection efficiency and prevent malicious codes The effect of dissemination and ensuring accuracy

Active Publication Date: 2017-09-15
THE PLA INFORMATION ENG UNIV +1
View PDF4 Cites 24 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] Aiming at the deficiencies in the prior art, the present invention provides a code homology detection method based on code fingerprints and its device, which solves the problems of weak anti-aliasing interference ability and low detection efficiency during th...

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Code homology detection method based on code fingerprint and device thereof
  • Code homology detection method based on code fingerprint and device thereof
  • Code homology detection method based on code fingerprint and device thereof

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0059] In order to make the purpose, technical solution and advantages of the present invention more clear and understandable, the present invention will be further described in detail below in conjunction with the accompanying drawings and technical solutions.

[0060] At this stage, the method research on code homology detection is mostly based on a single type. Coarse-grained feature detection can improve detection efficiency but reduce detection accuracy, while fine-grained features can improve detection accuracy and bring a computationally intensive performance bottleneck. How to effectively deal with complex code obfuscation methods under the condition of efficient detection, accurately abstract code logic and summarize code features is an important content that needs to be studied at present.

[0061] In an embodiment, a method for detecting code homology based on code fingerprints is provided, see figure 1 shown, including the following steps:

[0062] Step 1. Perfor...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to a code homology detection method based on code fingerprint and a device thereof. The method comprises: performing dependence analysis on input codes, obtaining an original program dependence graph PDG; performing structure simplification, removing nesting and performing shading on the original program dependence graph PDG, to obtain a simplified program dependence graph sPDG; based on an abstract syntax tree, analyzing code key grammar information; extracting a system call sequence of a code execution path, to obtain a full path parameter vector assembly of an object code, to build code fingerprint; calculating a homology coefficient of code fingerprint components; according to the homology coefficient, calculating a homology index of two codes S and T, and through the homology index, determining a homologous relation exists in the both codes. The method can give consideration to code semantics and behaviors on the basis of similarity, and improves detection efficiency by using a lightweight characteristic and simplified mechanism, and measures homologous relations among codes in a multi-angle manner, and improves detection efficiency while ensuring accuracy.

Description

technical field [0001] The invention belongs to the technical field of computer software applications, and in particular relates to a method for detecting code homology based on code fingerprints and a device thereof. Background technique [0002] With the growth of various Internet application requirements and the increase of code iteration speed, higher requirements are put forward for programmers' development efficiency and speed. In the software development pipeline, secondary development based on templates and reuse of existing components are common phenomena; at the same time, in order to solve new requirements, developers usually refer to codes in open source code warehouses on the Internet. This has resulted in the continuous growth of code with the same origin through different channels, and the wide spread of hidden defects and errors in the code. At the same time, with the continuous development of computer security technology and the continuous improvement of vi...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F21/56G06F9/45
Inventor 魏强刘臻曹琰尹中旭彭建山
Owner THE PLA INFORMATION ENG UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap