基于系统函数调用频率与指令基本块的软件胎记  

Software Birthmark Based on System Function Call Frequency and Basic Block Instruction

作　　者：张杏[1] 徐江峰[1] 李晓阳[1] 

机构地区：[1]郑州大学信息工程学院,郑州450000

出　　处：《计算机工程》2016年第10期86-90,共5页Computer Engineering

基　　金：国家自然科学基金资助项目"手机视频直播系统QoE/QoS关键问题研究"(61379079);国家科技支撑计划基金资助项目"三维动漫制作技术研究与应用示范"(2014BAH09F00)

摘　　要：软件胎记作为软件独有的内部属性,常被用来检测不同软件之间的相似度。在研究软件胎记的基础上,提出一种将2种不同粒度级的动态胎记相结合的软件胎记提取方法。该方法以程序执行时调用的系统函数及其频率作为粗粒度级胎记,用户自定义函数执行时的指令基本块作为细粒度级胎记,将2种胎记相结合作为软件的最终胎记。仿真实验结果表明,与单一粒度级别的胎记方法相比,该方法提高了软件胎记的可信性和可靠性,具有更强的抗攻击能力。As unique internal properties, software birthmark is often used to detect the similarity between different software. On the basis of researching software birthmark, this paper proposes a new method combining two dynamic birthmarks with different granularity to be a new software birthmark. The coarse-graired birthmark is the system function called by the executing program and the call frequency, and the fine-grained birthmark is the set of basic block instruction when user-defined function is executing. The combination of the two birthmarks is the final software birthmark. Simulation experimental results show that compared with the method using single-granularity birthmark, the proposed method improves the credibility and the reliability of software birthmark, and it has stronger ability to resist attacks.

关 键 词：软件胎记 系统函数 基本块 相似度 可信性 可靠性 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]