Detecting code clones in binary executables

Proceedings of the 18th International Symposium on Software Testing and Analysis, ISSTA 2009

Volumn , Issue , 2009, Pages 117-127

  Sæbjørnsen, Andreas ^a   Willcock, Jeremiah ^b   Panas, Thomas ^c   Quinlan, Daniel ^c   Su, Zhendong ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b INDIANA UNIVERSITY   (United States)

^c LAWRENCE LIVERMORE NATIONAL LABORATORY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BINS; CLONING; CODES (SYMBOLS); SOFTWARE TESTING; TREES (MATHEMATICS); WINDOWS OPERATING SYSTEM;

ASSEMBLY INSTRUCTIONS; BINARY EXECUTABLES; CHARACTERISTIC VECTORS; CLONE DETECTION ALGORITHMS; ENABLING TECHNOLOGIES; STRUCTURAL INFORMATION; THIRD PARTY SOFTWARE; TREE SIMILARITIES;

PROGRAM DEBUGGING;

EID: 85008263762     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1572272.1572287     Document Type: Conference Paper

References (27)

1. IDA Pro disassembler. http://www.datarescue.com.
2. JPlag. http://www.jplag.de.
3. A. Andoni and P. Indyk. E2LSH: Exact Euclidean locality-sensitive hashing. Web: http://www.mit.edu/~andoni/LSH/, 2004.
4. A. Andoni and P. Indyk. Near-optimal hashing algorithms for approximate nearest neighbor in high dimensions. Commun. ACM, 51(1):117-122, 2008.
5. B. S. Baker. Parameterized duplication in strings: Algorithms and an application to software maintenance. SIAM J. Comput., 26(5):1343-1362, 1997.
6. H. A. Basit and S. Jarzabek. Detecting higher-level similarity patterns in programs. In ESEC/FSE-13, pages 156-165, 2005.
7. I. D. Baxter, C. Pidgeon, and M. Mehlich. DMS R: Program transformations for practical scalable software evolution. In ICSE, pages 625-634, 2004.
8. D. Bruschi, L. Martignoni, and M. Monga. Detecting self-mutating malware using control ow graph matching. In DIMVA, pages 129-143, 2006.
9. M. Christodorescu and S. Jha. Static analysis of executables to detect malicious patterns. In USENIX, editor, Proceedings of the 2003 USENIX Security Symposium. USENIX, 2003.
10. M. Christodorescu and S. Jha. Testing malware detectors. In International Symposium on Software Testing and Analysis, pages 34-44, 2004.
11. M. Christodorescu, S. Jha, S. A. Seshia, D. X. Song, and R. E. Bryant. Semantics-aware malware detection. In IEEE Symposium on Security and Privacy, pages 32-46, 2005.
12. M. Gabel, L. Jiang, and Z. Su. Scalable detection of semantic clones. In ICSE, pages 321-330, 2008.
13. A. Gionis, P. Indyk, and R. Motwani. Similarity search in high dimensions via hashing. In Very Large Data Bases, pages 518-529, San Francisco, CA, USA, 1999. Morgan Kaufmann Publishers Inc.
14. A. Hemel. The GPL compliance engineering guide. http://www.loohuis-consulting.nl/downloads/compliance-manual.pdf.
15. P. Indyk and R. Motwani. Approximate nearest neighbors: towards removing the curse of dimensionality. In ACM Symposium on Theory of Computing, pages 604-613. ACM, 1998.
16. L. Jiang, G. Misherghi, Z. Su, and S. Glondu. Deckard: Scalable and accurate tree-based detection of code clones. In ICSE, pages 96-105, 2007.
17. T. Kamiya, S. Kusumoto, and K. Inoue. CCFinder: a multilinguistic token-based code clone detection system for large scale source code. IEEE Trans. Softw. Eng., 28(7):654-670, 2002.
18. R. Komondoor and S. Horwitz. Using slicing to identify duplication in source code. In Symposium on Static Analysis, pages 40-56, London, UK, 2001. Springer-Verlag.
19. C. Kruegel, D. Mutz, W. Robertson, and G. Vigna. Polymorphic worm detection using structural information of executables. In Recent Adv. in Intrusion Detection, pages 207-226. Springer-Verlag, 2005.
20. Z. Li, S. Lu, S. Myagmar, and Y. Zhou. CP-Miner: a tool for finding copy-paste and related bugs in operating system code. In OSDI, pages 20-20, 2004.
21. S. Schleimer, D. S. Wilkerson, and A. Aiken. Winnowing: Local algorithms for document fingerprinting. In Management of Data, pages 76-85, 2003.
22. M. Schordan and D. Quinlan. A source-to-source architecture for user-defined optimizations. In Joint Modular Languages Conference, volume 2789 of Lecture Notes in Computer Science, pages 214-223. Springer Verlag, Aug. 2003.
23. D. Schuler, V. Dallmeier, and C. Lindig. A dynamic birthmark for Java. In ASE07, pages 274-283, New York, NY, USA, 2007. ACM.
24. A. Schulman. Finding binary clones with opstrings and function digests. Doctor Dobb's J, 30(9):64-70, 2005.
25. G. Shakhnarovich, T. Darrell, and P. Indyk. Nearest-Neighbor Methods in Learning and Vision: Theory and Practice. The MIT Press, 2006.
26. V. Wahler, D. Seipel, J. W. von Gudenberg, and G. Fischer. Clone detection in source code by frequent itemset techniques. In Source Code Analysis and Manipulation, pages 128-135, 2004.
27. H. Yin, D. X. Song, M. Egele, C. Kruegel, and E. Kirda. Panorama: capturing system-wide information ow for malware detection and analysis. In ACM Conf. on Computer and Comms. Sec., pages 116-127, 2007.