A static birthmark of binary executables based on API call structure

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4846 LNCS, Issue , 2007, Pages 2-16

  Choi, Seokwoo ^a   Park, Heewan ^a   Lim, Hyun Il ^a   Han, Taisook ^a  

^a Korea Advanced Institute of Science and Technology (KAIST)   (South Korea)

Author keywords

Binary analysis; Software birthmark; Software piracy

Indexed keywords

COMPUTER CRIME; COMPUTER SOFTWARE; FUNCTION EVALUATION; GRAPH THEORY;

BINARY ANALYSIS; SOFTWARE BIRTHMARK;

BINARY CODES;

EID: 38348998898     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-76929-3_2     Document Type: Conference Paper

References (24)

1. Schleimer, S., Wilkerson, D., Aiken, A.: Winnowing: local algorithms for document fingerprinting. In: Proceedings of the 2003 ACM SIGMOD international conference on Management of data, pp. 76-85. ACM Press, New York (2003)
2. Wise, M.: YAP3: improved detection of similarities in computer program and other texts. In: Proceedings of the twenty-seventh SIGCSE technical symposium on Computer science education, pp. 130-134 (1996)
3. Prechelt, L., Malpohl, G., Philippsen, M.: Finding plagiarisms among a set of programs with JPlag. Journal of Universal Computer Science 8(11), 1016-1038 (2002)
4. SABRE BinDiff, http://www.Babre-security.com/products/bindiff.html
5. Using BinDiff for Code theft detection, http://www.sabre-security.com/ products/CodeTheft.pdf
6. Tamada, H., Okamoto, K., Nakamura, M., Monden, A., Matsumoto, K.: Dynamic Software Birthmarks to Detect the Theft of Windows Applications. International Symposium on Future Software Technology 20(22) (2004)
7. Okamoto, K., Tamada, H., Nakamura, M., Monden, A., Matsumoto, K.: Dynamic Software Birthmarks Based on API Calls. IEICE Transactions on Information and Systems 89(8), 1751-1763 (2006)
8. The IDA Pro Disassembler and Debugger, http://www.datarescue.com/idabase
9. Collberg, C., Thomborson, C.: Watermarking, tamper-proofing, and obfuscation-tools for software protection. Software Engineering, IEEE Transactions on 28(8), 735-746 (2002)
10. Collberg, C., Thomborson, C.: Software watermarking: models and dynamic embeddings. In: Proceedings of the 26th ACM SIGPLAN-SIGACT symposium on Principles of programming languages, pp. 311-324. ACM Press, New York (1999)
11. Collberg, C., Myles, G., Huntwork, A.: Sandmark-A tool for software protection research. Security & Privacy Magazine, IEEE 1(4), 40-49 (2003)
12. Tamada, H., Nakamura, M., Monden, A., Matsumoto, K.: Design and evaluation of birthmarks for detecting theft of java programs. In: Proc. IASTED International Conference on Software Engineering (IASTED SE 2004), pp. 569-575 (2004)
13. Tamada, H., Nakamura, M., Monden, A., Matsumoto, K.: Java Birthmarks-Detecting the Software Theft-, IEICE Transactions on Information and Systems 88(9), 2148-2158 (2005)
14. Myles, G., Collberg, C.: K-gram based software birthmarks. In: Proceedings of the 2005 ACM symposium on Applied computing, pp. 314-318. ACM Press, New York (2005)
15. Myles, G., Collberg, C.: Detecting software theft via whole program path birth-marks. Information Security Conference, 404-415 (2004)
16. MyIes, G.M.: Software Theft Detection Through Program Identification. PhD thesis, Department of Computer Science, The University of Arizona (2006)
17. Larus, J.: Whole program paths. In: Proceedings of the ACM SIGPLAN 1999 conference on Programming language design and implementation, pp. 259-269. ACM Press, New York (1999)
18. Bunke, H., Shearer, K.: A graph distance metric based on the maximal common subgraph. Pattern Recognition Letters 19(3-4), 255-259 (1998)
19. Schuler, D., Dallmeier, V., Lindig, C.: A Dynamic Birthmark for Java. In: Proceedings of the 22nd IEEE/ACM International Conference on Automated Software Engineering
20. Kuhn, H.: The Hungarian method for the assignment problem. Naval Research Logistics 52(1), 7-21 (2005)
21. Kibria, R. : frhed - free hex editor, http://www.codeproject.com/tools/ frhed.asp
22. Cloakware security suite, http://www.cloakware.com/products.services/ security.suite
23. Wang, C.: A Security Architecture for Survivability Mechanisms. PhD thesis, University of Virginia
24. Balakrishnan, G., Reps, T.: Recency-abstraction for heap-allocated storage. Static Analysis Symp. (2006)