二进制文件相似性检测技术对比分析-计算机工程与应用.pdfVIP

Computer Engineering and Applications 计算机工程与应用 2012 ，48 （33） 79 二进制文件相似性检测技术对比分析 1，2 3 2 4 陈 慧 ，郭 涛 ，崔宝江 ，王建新 1，2 3 2 4 CHEN Hui , GUO Tao , CUI Baojiang , WANG Jianxin 1.山东英才学院 计算机学院，济南 250104 2.北京邮电大学 计算机学院，北京 100876 3.中国信息安全测评中心，北京 100085 4.北京林业大学 信息学院，北京 100083 1.School of Computer Science and Technology, Shandong Yingcai University, Jinan 250104, China 2.School of Computer Science and Technology, Beijing University of Posts and Telecommunications, Beijing 100876, China 3.China Information Technology Security Evaluation Center, Beijing 100085, China 4.School of Information Science and Technology, Beijing Forestry University, Beijing 100083, China CHEN Hui, GUO Tao, CUI Baojiang, et al. Comparison and analysis on binary file similarity detection tech- nique. Computer Engineering and Applications, 2012, 48 （33 ）：79-84. Abstract ：The traditional file similarity detection technique is generally based on source code. In the case of source code unavailable, binary comparison technique is proposed for clone detection. Four binary file similarity detection techniques and the main detection tools are summarized and analyzed. Based on the evaluation method of binary file clone comparison, the experiment test has been carried on. This method provides a review of binary file clone types, detection approaches and the similarity calculation standard. Experiments show that for continuous clone, division clone which doesn ’t affect the call relations, equivalent replacement clone which doesn ’t affect basic block number and the call relations, the techniques similarity detection with the binary files gets more accurate result than the ones token-based similarity detection with the source code files. Key words ：homologous software; binary file comparison; clone detection 摘 要：传统的文件相似性检测技术是基于源代码的，针对源代码难以获取的情况，二进制文件比对技术被提 出并受到越来越多的关注。总