| value-based program characterization and its application to software plagiarism detection | |
| Jhi Yoon-Chan; Wang Xinran; Jia Xiaoqi; Zhu Sencun; Liu Peng; Wu Dinghao | |
| 2011 | |
| 会议名称 | 33rd International Conference on Software Engineering, ICSE 2011 |
| 会议录名称 | Proceedings - International Conference on Software Engineering |
| 页码 | 756-765 |
| 会议日期 | 21-May-20 |
| 会议地点 | Waikiki, Honolulu, HI, United states |
| 收录类别 | EI |
| 出版地 | United States |
| ISSN | 2705257 |
| ISBN | 9781450304450 |
| 部门归属 | (1) Penn State University, University Park, PA 16802, United States; (2) State Key Laboratory of Information Security, Institute of Software, Chinese Academy of Sciences, China |
| 摘要 | Identifying similar or identical code fragments becomes much more challenging in code theft cases where plagiarizers can use various automated code transformation techniques to hide stolen code from being detected. Previous works in this field are largely limited in that (1) most of them cannot handle advanced obfuscation techniques; (2) the methods based on source code analysis are less practical since the source code of suspicious programs is typically not available until strong evidences are collected; and (3) those depending on the features of specific operating systems or programming languages have limited applicability. Based on an observation that some critical runtime values are hard to be replaced or eliminated by semantics-preserving transformation techniques, we introduce a novel approach to dynamic characterization of executable programs. Leveraging such invariant values, our technique is resilient to various control and data obfuscation techniques. We show how the values can be extracted and refined to expose the critical values and how we can apply this runtime property to help solve problems in software plagiarism detection. We have implemented a prototype with a dynamic taint analyzer atop a generic processor emulator. Our experimental results show that the value-based method successfully discriminates 34 plagiarisms obfuscated by SandMark, plagiarisms heavily obfuscated by KlassMaster, programs obfuscated by Thicket, and executables obfuscated by Loco/Diablo. © 2011 ACM. |
| 关键词 | Cosine Transforms Semantics Software Engineering |
| 主办者 | Assoc. Comput. Mach., Spec. Interest Group Softw.; Eng. (ACM SIGSOFT); IEEE Computer Society; Technical Council on Software Engineering (TCSE) |
| 内容类型 | 会议论文 |
| URI标识 | http://ir.iscas.ac.cn/handle/311060/14207 |
| 专题 | 信息安全国家重点实验室 |
| 推荐引用方式 GB/T 7714 | Jhi Yoon-Chan,Wang Xinran,Jia Xiaoqi,et al. value-based program characterization and its application to software plagiarism detection[C]. United States,2011:756-765. |
| 条目包含的文件 | ||||||
| 文件名称/大小 | 文献类型 | 版本类型 | 开放类型 | 使用许可 | ||
| value-based program （684KB） | 开放获取 | -- | 请求全文 | |||
除非特别说明，本系统中所有内容都受版权保护，并保留所有权利。
修改评论