Detecting Common Modules in Java Packages Based on Static Object Trace Birthmark
Detecting Common Modules in Java Packages Based on Static Object Trace Birthmark
复制标题
DOI：
10.1093/comjnl/bxp095
复制
发表时间：
2011
期刊：
影响因子：
--
通讯作者：
Heewan Park;Hyun-il Lim;Seokwoo Choi;Taisook Han
中科院分区：
文献类型：
--
作者：
Heewan Park;Hyun-il Lim;Seokwoo Choi;Taisook Han
软件胎记意味着可以用来识别程序的固有特征。本文提出了一种基于Java程序对象痕迹的胎记技术。Java是一种面向对象的编程语言，它提供了各种预定义的类库，帮助程序员轻松地生成软件。为了使用Java类库，我们必须使用Java对象指令。Java对象指令很难替换或删除，因此一组对象指令序列是表示程序固有特征的合适候选者。我们提出了一个新的胎记使用的对象指令序列。我们评估建议的胎记与开源程序，并将其与以前的静态胎记。实验结果表明，我们的胎记的检测能力是远远高于其他静态胎记，尽管烟雾和ZKM混淆。
A software birthmark means inherent characteristics that can be used to identify a program. In this paper, we propose a birthmark technique based on object traces of Java programs. Java is an object-oriented programming language that provides various predefined class libraries that help programmers to produce software easily. In order to utilize Java class libraries, we have to use Java object instructions. The Java object instructions are hard to replace or remove, and so a set of sequences of object instructions is a proper candidate to represent inherent characteristics of a program. We propose a new birthmark using the sequences of object instructions. We evaluate the proposed birthmark with open source programs and compare it with previous static birthmarks. Experiments show that the detection capability of our birthmark is much higher than that of other static birthmarks despite obfuscations by Smokescreen and ZKM.