Source code file matching rate analysis method

Abstract

The invention relates to a source code file matching rate analysis method. The method comprises the following steps: 1) respectively extracting file-level features of a first source code file and a second source code file; 2) comparing file hash values of the first source code file and the second source code file, and if the file hash values are the same, determining that the matching rate of thetwo files is 100%; 3) respectively extracting function-level features of the first source code file and the second source code file; 4) respectively comparing the hash values of the functions in the first source code file and the second source code file, and counting the number of code lines of one or more functions with the same hash value to obtain a first number of code lines; and step 5) counting the effective code line number of the first source code file to serve as a second code line number, and multiplying the first code line number by the second code line number by 100% to obtain a matching rate of the first code line number and the second code line number, thereby completing effective detection of the matching rate of the source code file on the basis of source code multistage feature extraction.

Description

Technical field [0001] The invention relates to the field of information security, in particular to a method for analyzing the matching rate of source code files. Background technique [0002] Domestic code composition and security risk analysis technology research is in a stage where a hundred flowers bloom and a hundred schools of thought contend. Some university professors and security experts are engaged in research in some subdivided technical fields. [0003] Professor Wang Fengyu of Shandong University is studying binary code matching and analysis technology based on function layer features. This method needs to disassemble malware and analyze the assembly code to obtain the features of the function. Therefore, the features of the function will be interfered by the obfuscation technology and need to be adopted. The method of combining static analysis and dynamic analysis is used for research. This method is mainly used to realize the detection of malware. The existing resear...

AI Technical Summary

Problems solved by technology

However, the China Open Source Security Alliance currently only implements security vulnerability scanning and analysis for binary code, lacking the function of source code analysis

Images