Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Software classification method and apparatus

A classification method and technology of classification device, which are applied in software maintenance/management, computer parts, decompile/disassembly, etc., can solve the problems of forgery and inaccurate software classification, and achieve accurate classification information and unforgeable classification information. Effect

Inactive Publication Date: 2018-11-02
上海戎磐网络科技有限公司
View PDF4 Cites 6 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, in the prior art, the software is usually classified only according to the classification conditions other than the software code itself, such as the software type claimed by the software accompanying information or the claimed content provider. The information of these claimed classification conditions may be forged, resulting in software Inaccurate classification

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Software classification method and apparatus
  • Software classification method and apparatus
  • Software classification method and apparatus

Examples

Experimental program
Comparison scheme
Effect test

no. 1 example

[0050] Please refer to figure 2 , figure 2 for application to figure 1 A flow chart of a method for acquiring application information of the electronic device 100 is shown, and the method includes various steps to be described in detail below.

[0051] Step S110, obtaining software codes of a plurality of software to be classified.

[0052] In this embodiment, the software to be classified may be a PE type file or an ELF type file. After the electronic device 100 acquires a plurality of software to be classified, the software to be classified can be decompiled into codes to be processed in asm format through the IDA disassembly tool, wherein the IDA disassembly tool is an interactive A disassembler plug-in that can decompile software into assembly language format.

[0053] Through step S110, the plurality of software to be classified can be decompiled into a unified asm format, which is beneficial to the clustering analysis in subsequent steps.

[0054] Step S120, split...

no. 2 example

[0074] Please refer to Figure 4 , Figure 4 An application provided for this embodiment figure 1 The flow chart of the malware identification method of the electronic device 100 is shown, and the method includes various steps to be described in detail below.

[0075] Step S210, acquiring the software code of the target software.

[0076] Step S220, splitting the software code of the target software into multiple target code gene fragments according to the position of the code calling the system API in the software code of the target software;

[0077] Wherein, the processing process of the target software in step S210 and step S220 is similar to the processing process of a single software to be classified in step S110 (210) and step S120 in the first embodiment, please refer to the first implementation step S110 (210) for details ) and the description of step S120.

[0078] For example, in step S220, the electronic device 100 may obtain the position of the code calling th...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The present application provides a software classification method and apparatus. The method comprises: obtaining software codes of a lot of to-be-classified software; according to the location of thecode for calling the system API in the software code of each to-be-classified software, splitting the software code of each to-be-classified software into a plurality of code gene segments to obtain asoftware gene library including the code gene segments of a lot of to-be-classified software; performing clustering analysis on a lot of to-be-classified software in the software gene library according to the plurality of code gene segments, and dividing a lot of to-be-classified software into a plurality of software families; and adding a corresponding family tag for each of the software families. Thus, according to the technical scheme of the present application, the software can be classified according to the software code itself, so that the classification information of the software is more accurate and the classification information cannot be forged.

Description

technical field [0001] The present application relates to the technical field of software security, in particular, to a software classification method and device. Background technique [0002] With the continuous development of information technology, more and more software is used in various electronic devices, and various software content providers are becoming more and more complicated. Correspondingly, software management and software security issues are getting more and more attention. Effective classification of software can facilitate software management, and can make identification or protection of malicious software more targeted. For example, software provided by the same malicious software content provider can be classified into one category, and this type of software can be identified and filtered in a targeted manner. However, in the prior art, the software is usually classified only according to the classification conditions other than the software code itself...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): G06K9/62G06F8/53G06F8/74
CPCG06F8/53G06F8/74G06F18/23
Inventor 刘旭胡逸漪章丽娟
Owner 上海戎磐网络科技有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com