Dynamic Software Birthmarks to Detect the Theft of Windows Applications
نویسندگان
چکیده
This paper proposes dynamic software birthmarks which can be extracted during execution of Windows applications. Birthmarks are unique and native characteristics of software. For a pair of software p and q, if q has the same birthmarks as p’s, q is suspected as a copy of p. Our security analysis showed that the proposed birthmark has good tolerance against various kinds of program transformation attacks.
منابع مشابه
Detecting Java Theft Based on Static API Trace Birthmark
Software birthmark is the inherent program characteristics that can identify a program. In this paper, we propose a static API trace birthmark to detect Java theft. Because the API traces can reflect the behavior of a program, our birthmark is more resilient than the existing static birthmarks. Because the API traces are extracted by static analysis, they can be applied to library programs whic...
متن کاملDesign and Evaluation of Dynamic Software Birthmarks Based on API Calls
This paper presents a technique of dynamic software birthmarks to support efficient detection of software theft. A dynamic birthmark f(p, I) is a set of unique and native characteristics of a program p, obtained by executing p with a given input I . For a pair of software p and q, if f(p, I) = f(q, I) holds, q is suspected as a copy of p. In this paper, we propose two kinds of dynamic birthmark...
متن کاملDesign and evaluation of birthmarks for detecting theft of java programs
¡¡¡¡¡¡¡ 200402.tex ABSTRACT To detect theft of Java class files efficiently, we have so far proposed a concept of Java birthmarks. Since the birthmarks are unique and native characteristics of every class file, a class file with the same birthmark of another can be easily suspected as a copy. However, performance and tolerance of the birthmarks against sophisticated attacks had not been evaluat...
متن کاملDetecting Theft of Java Applications via a Static Birthmark Based on Weighted Stack Patterns
A software birthmark means the inherent characteristics of a program that can be used to identify the program. A comparison of such birthmarks facilitates the detection of software theft. In this paper, we propose a static Java birthmark based on a set of stack patterns, which reflect the characteristic of Java applications. A stack pattern denotes a sequence of bytecodes that share their opera...
متن کاملJava Birthmarks - Detecting the Software Theft -
To detect the theft of Java class files efficiently, we propose a concept of Java birthmarks, which are unique and native characteristics of every class file. For a pair of class files p and q, if q has the same birthmark as p’s, q is suspected as a copy of p. Ideally, the birthmarks should satisfy the following properties: (a) preservation – the birthmarks should be preserved even if the origi...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
عنوان ژورنال:
دوره شماره
صفحات -
تاریخ انتشار 2004