Heap Graph Based Software Theft Detection

Chan, Patrick; Hui, Lucas Chi Kwong; Yiu, Siu-Ming

doi:10.1109/tifs.2012.2223685

Cited by 30 publications

(9 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Unlike software watermarks, there is no need for prior information embedding; features unique to the program are taken from the compiled binary and defined as the birthmark. Several different types of birthmark that focus on a different program features have been proposed [3][4][5][6][7][8].…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Static Software Birthmark based on Multiple Attributes

Shi¹

2017

Proceedings of the 2017 International Conference on Mechanical, Electronic, Control and Automation Engineering (MECAE 2017)

View full text Add to dashboard Cite

Abstract. Software birthmarks have been proposed as a method for enabling the detection of programs that may have been stolen by measuring the similarity between the two programs. A birthmark is created from each program by extracting its native characteristics. The birthmarks of the programs can then be compared. However, the existing software birthmark is mainly software birthmark single attribute, they will play a good effect in the specific scene, but poor robustness in general single attribute software. For a single attribute of software birthmark has poor robustness, resistance to attack ability is not strong, multi attribute extraction software birthmark from point of view, this paper firstly proposed Java software related attribute analysis of hierarchical structure, on the basis of a multi attribute static software birthmark.

show abstract

Section: Related Workmentioning

confidence: 99%

“…For example, the Jaccard index [7], Dice's coefficient [4] or cosine similarity [6] are often used for sets, and the longest common subsequence [5,8] is used for sequences. Methods for graphs are more complex; however, methods using graph isomorphism have been proposed [3,9].…”

Section: Related Workmentioning

confidence: 99%

Static Software Birthmark based on Multiple Attributes

Shi¹

2017

Proceedings of the 2017 International Conference on Mechanical, Electronic, Control and Automation Engineering (MECAE 2017)

View full text Add to dashboard Cite

show abstract

“…Computing the similarity of graphs is relatively more complex. It is conducted by either graph monomorphism [23] or isomorphism algorithms [10], [24], or by translating a graph into a vector using algorithms such as random walk with restart [25].…”

Section: Similarity Calculationmentioning

confidence: 99%

Software Plagiarism Detection with Birthmarks Based on Dynamic Key Instruction Sequences

Tian

Zheng

Liu

et al. 2015

IIEEE Trans. Software Eng.

View full text Add to dashboard Cite

A software birthmark is a unique characteristic of a program. Thus, comparing the birthmarks between the plaintiff and defendant programs provides an effective approach for software plagiarism detection. However, software birthmark generation faces two main challenges: the absence of source code and various code obfuscation techniques that attempt to hide the characteristics of a program. In this paper, we propose a new type of software birthmark called DYKIS (DYnamic Key Instruction Sequence) that can be extracted from an executable without the need for source code. The plagiarism detection algorithm based on our new birthmarks is resilient to both weak obfuscation techniques such as compiler optimizations and strong obfuscation techniques implemented in tools such as SandMark, Allatori and Upx. We have developed a tool called DYKIS-PD (DYKIS Plagiarism Detection tool) and conducted extensive experiments on large number of binary programs. The tool, the benchmarks and the experimental results are all publicly available.Index Terms-software plagiarism detection, software birthmark ! 0098-5589 (c)

show abstract

“…Computing the similarity of graphs is relatively more complex. It is conducted by either graph monomorphism or isomorphism algorithms [5,14] or translating a graph into a vector using algorithms such as random walk with restart [4]. In our work, we explore different methods to calculate the similarity of birthmarks generated with the SA and SS model.…”

Section: Similarity Calculationmentioning

confidence: 99%

“…Recently [10,26] suggested to characterize software with core values and applied it to software and algorithm plagiarism detection. A heap graph birthmark based on heap memory analysis is proposed by Patrick et al [5], and graph monomorphism algorithm is used to compute the similarity.…”

Section: Related Workmentioning

confidence: 99%

Plagiarism detection for multithreaded software based on thread-aware software birthmarks

Tian

Zheng

Liu

et al. 2014

Proceedings of the 22nd International Conference on Program Comprehension

View full text Add to dashboard Cite

The availability of inexpensive multicore hardware presents a turning point in software development. In order to benefit from the continued exponential throughput advances in new processors, the software applications must be multithreaded programs. As multithreaded programs become increasingly popular, plagiarism of multithreaded programs starts to plague the software industry. Although there has been tremendous progress on software plagiarism detection technology, existing dynamic approaches remain optimized for sequential programs and cannot be applied to multithreaded programs without significant redesign. This paper fills the gap by presenting two dynamic birthmark based approaches. The first approach extracts key instructions while the second approach extracts system calls. Both approaches consider the effect of thread scheduling on computing software birthmarks. We have implemented a prototype based on the Pin instrumentation framework. Our empirical study shows that the proposed approaches can effectively detect plagiarism of multithread programs and exhibit strong resilience to various semantic-preserving code obfuscations.

show abstract

Heap Graph Based Software Theft Detection

Cited by 30 publications

References 9 publications

Static Software Birthmark based on Multiple Attributes

Static Software Birthmark based on Multiple Attributes

Software Plagiarism Detection with Birthmarks Based on Dynamic Key Instruction Sequences

Plagiarism detection for multithreaded software based on thread-aware software birthmarks

Contact Info

Product

Resources

About