Detecting software theft via system call based birthmarks

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2009, Pages 149-158

  Wang, Xinran ^a   Jhi, Yoon Chan ^a   Zhu, Sencun ^a   Liu, Peng ^b  

^a The Pennsylvania State University   (United States)

^b PENNSYLVANIA STATE UNIVERSITY   (United States)

Author keywords

Birthmark; Detection; Plagiarism

Indexed keywords

BEHAVIORAL CHARACTERISTICS; COMPILER OPTIMIZATIONS; DETECTION SYSTEM; OPEN SOURCE PROJECTS; SHORT SEQUENCES; SOFTWARE COMPONENT; SOFTWARE INDUSTRY; SYSTEM CALLS;

COMPUTER APPLICATIONS; CRIME; PROGRAM COMPILERS; SOFTWARE ENGINEERING; WEB BROWSERS;

WORLD WIDE WEB;

EID: 77950834638     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2009.24     Document Type: Conference Paper

References (26)

1. C. Collberg and C. Thomborson, "Software watermarking: Models and dynamic embeddings," in Principles of Programming Languages 1999, Jan. 1999.
2. C. Collberg, E. Carter, S. Debray, A. Huntwork, C. Linn, and M. Stepp, "Dynamic path-based software watermarking," in Proceedings of the Conference on Programming Language Design and Implementation, 2004.
3. H. Tamada, M. Nakamura, A. Monden, and K. ichi Matsumoto, "Design and evaluation of birthmarks for detecting theft of java programs," in Proc. IASTED International Conference on Software Engineering, 2004.
4. D. Schuler, V. Dallmeier, and C. Lindig, "A dynamic birthmark for java," in ASE '07: Proc. of the twenty-second IEEE/ACM international conference on Automated software engineering, 2007.
5. G. Myles and C. Collberg, "Detecting software theft via whole program path birthmarks," in ISC, 2004, pp. 404-415.
6. H. Tamada, K. Okamoto, M. Nakamura, and A. Monden, "Dynamic software birthmarks to detect the theft of windows applications," in International Symposium on Future Software Technology 2004 (ISFST 2004), 2004.
7. C. Collberg, C. Thomborson, and D. Low, "A taxonomy of obfuscating transformations," The Univeristy of Auckland, Tech. Rep. 148, Jul. 1997.
8. G. Myles and C. S. Collberg, "K-gram based software birthmarks," in SAC, 2005.
9. E. Kirda, C. Kruegel, G. Banks, G. Vigna, and R. A. Kemmerer, "Behavior-based spyware detection," in Proceedings of the 15th conference on USENIX Security Symposium, 2006.
10. M. Christodorescu, S. Jha, and C. Kruegel, "Mining specifications of malicious behavior," in Proc. of ESEC/FSE, 2008.
11. "Gecko," http://en.wikipedia.org/wiki/Gecko-layout-engine.
12. "KHTML," http://en.wikipedia.org/wiki/KHTML.
13. C. Collberg, G. Myles, and A. Huntwork, "Sandmark - a tool for software protection research," IEEE Security and Privacy, vol.1, no. 4, pp. 40-49, 2003.
14. S. Forrest, S. A. Hofmeyr, A. Somayaji, and T. A. Longstaff, "A sense of self for Unix processes," in Proceedinges of the 1996 IEEE Symposium on Research in Security and Privacy, 1996.
15. N. Nethercote and J. Seward, "Valgrind: a framework for heavyweight dynamic binary instrumentation," in Proceedings of the 2007 ACM SIGPLAN conference on Programming language design and implementation.
16. "Elsa: An Elkhound-based C++ parser," http://scottmcpeak.com/ elkhound/.
17. X. Wang, Y.-C. Jhi, S. Zhu, and P. Liu, "Behavior based software theft detection," in Proc. of the 16th ACM Conference on Computer and Communications Security (CCS'09), 2009.
18. H. Tamada, K. Okamoto, M. Nakamura, A. Monden, and K. ichi Matsumoto, "Design and evaluation of dynamic software birthmarks based on api calls," Nara Institute of Science and Technology, Technical Report, 2007.
19. B. S. Baker, "On finding duplication and near duplication in large software systems." in Proc. of 2nd Working Conf. on Reverse Engineering, 1995.
20. I. D. Baxter, A. Yahin, L. Moura, M. Sant'Anna, and L. Bier, "Clone detection using abstract syntax trees." in Int. Conf. on Software Maintenance, 1998.
21. K. Kontogiannis, M. Galler, and R. DeMori, "Detecting code similarity using patterns." in Working Notes of 3rd Workshop on AI and Software Engineering, 1995.
22. T. Kamiya, S. Kusumoto, and K. Inoue., "CCFinder: a multilinguistic token-based code clone detection system for large scale source code." IEEE Trans. Softw. Eng., vol. 28, no. 7, 2002.
23. L. Prechelt, G. Malpohl, and M. Philippsen, "Finding plagiarisms among a set of programs with jplag," Universal Computer Science, 2000.
24. S. Schleimer, D. S. Wilkerson, and A. Aiken, "Winnowing: local algorithms for document fingerprinting." in Proc. of ACM SIGMOD Int. Conf. on Management of Data, 2003.
25. C. Liu, C. Chen, J. Han, and P. S. Yu, "Gplag: detection of software plagiarism by program dependence graph analysis," in Proceedings of the 12th ACM SIGKDD international conference on Knowledge discovery and data mining, 2006.
26. J. Krinke, "Identifying similar code with program dependence graphs." in Proc. of 8th Working Conf. on Reverse Engineering, 2001.