Efficient Executable File Similarity Detection Scheme by Exploiting Executable Fingerprint
Sujin Oh, Jin Kim, Donghoi Kim, Young Woong Ko · 2017
These days, Windows Operating System is widely used and it is dominant than other commercial operating systems. Besides, most of the commercial software vendors provide a number of software mainly for Windows OS. Therefore, software similarity analysis systems for Windows OS are highly useful for software plagiarism detection and copyright protection. However, mostly the software similarity analysis systems and techniques work on source codes, not executables, even though the majority of commercial software barely makes public its source codes. In this paper, we propose a novel scheme for software plagiarism detection for Windows executables. Our technique exploits both extended basic blocks' opcode sequences and imported API functions information in executable files. We implemented our scheme and measured its performance through several kinds of experiments using code samples and different versions of commercial software.