基于OpCode的融合终端代码相似性检测方法研究  

Research on the similarity detection method for fusion terminal code based on OpCode

作　　者：陆蔺[1] 程磊[1] 卜树坡[1] Lu Lin;Cheng Lei;Bu Shupo(Department of Electronic and Communication Engineering,Suzhou Institute of Industrial Technology,Suzhou 215104,Jiangsu,China)

机构地区：[1]苏州工业职业技术学院电子与通信工程系,江苏苏州215104

出　　处：《电测与仪表》2023年第12期104-110,共7页Electrical Measurement & Instrumentation

基　　金：江苏省自然科学基金资助项目(BK20160352)。

摘　　要：近年来,软件安全问题频发,继承自第三方代码的漏洞一直困扰着开发人员,有效的App代码相似性检测成为保障系统稳定运行的关键。文章针对常规检测方法的特征维度过高、检测效率低等缺点,将编辑距离引入二进制指令集的相似度比较,提出了一种新的基于OpCode代码段编辑距离和所有公共子序列的图相似性相结合的智能融合终端二进制ELF文件相似性判定方法,提出调整后相似度模型的量化公式。对于开展融合终端App同源或相似性分析,评价源代码相似度量化指标,进而解决融合终端的安全隐患具有非常重要的意义。In recent years,software security issues have been frequent,and vulnerabilities inherited from third-party code have been troubling developers.Effective similarity detection of app code has become the key to ensure stable operation of system.This paper addresses the shortcomings of conventional detection methods such as high feature dimensions and low detection efficiency.For the first time,editing distance is introduced into the similarity comparison of binary instruction sets.A new intelligent fusion terminal binary ELF file similarity determination method based on the combination of OpCode code segment editing distance and graph similarity of all common subsequences is proposed,and a quantization formula for the adjusted similarity model is proposed.It is of great significance to carry out homology or similarity analysis of fusion terminal apps,evaluate quantitative indicators of source code similarity,and solve security risks of fusion terminals.

关 键 词：台区融合终端 OpCode操作码 编辑距离 所有公共子序列法 相似性度量 

分 类 号：TM76[电气工程—电力系统及自动化]