A dynamic birthmark for java
A dynamic birthmark for java
复制标题
DOI：
10.1145/1321631.1321672
复制
发表时间：
2007-11
期刊：
影响因子：
--
通讯作者：
David Schuler;Valentin Dallmeier;Christian Lindig
中科院分区：
文献类型：
--
作者：
David Schuler;Valentin Dallmeier;Christian Lindig
对于那些将代码阿萨核心资产的公司来说，代码盗窃是一种威胁。胎记可以帮助他们通过识别程序的内在属性来证明代码盗窃。两个有着相同胎记的程序很可能有着共同的起源。我们提出了一个动态胎记，观察程序如何使用Java标准API提供的对象。这样的胎记是很难箔，因为它捕获了程序的可观察的语义。在一次评估中，我们的API标记在使用最先进的混淆工具对其进行混淆之前和之后都能可靠地识别XML解析器和PNG阅读器。这些使现有的胎记无效，例如Myles和Collberg的Whole-Program-Path胎记
Code theft is a threat for companies that consider code asa core asset. A birthmark can help them to prove codetheft by identifying intrinsic properties of a program. Twoprograms with the same birthmark are likely to share a com-mon origin. Birthmarking works in particular for code thatwas not protected by tamper-resistant copyright notices thatotherwise could prove ownership.We propose a dynamic birthmark for Java that observes howa program uses objects provided by the Java Standard API.Such a birthmark is difficult to foil because it captures the observable semantics of a program. In an evaluation, ourAPI Birthmark reliably identified XML parsers and PNGreaders before and after obfuscating them with state-of-the-art obfuscation tools. These rendered existing birthmarksineffective, such as the Whole-Program-Path Birthmark byMyles and Collberg