Program similarity detection method and device, electronic equipment and storage medium

A detection method and similarity technology, applied in computer security devices, electronic digital data processing, platform integrity maintenance, etc., can solve the problems of low analysis accuracy and slow analysis speed, and achieve rapid screening and high accuracy. Effect

Pending Publication Date: 2021-01-22
ELECTRIC POWER RESEARCH INSTITUTE, CHINA SOUTHERN POWER GRID CO LTD +1
View PDF5 Cites 4 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] The invention provides a program similarity detection method, device, electronic equipment and storage medium, which are used to solve the technical problems of slow analysis speed and low analysis accuracy of the existing multiplexing function code detection method

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Program similarity detection method and device, electronic equipment and storage medium
  • Program similarity detection method and device, electronic equipment and storage medium
  • Program similarity detection method and device, electronic equipment and storage medium

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0054]The embodiment of the present invention provides a program similarity detection method, device, electronic equipment and storage medium, which are used to solve the technical problems of slow analysis speed and low analysis accuracy of the existing multiplexing function code detection method.

[0055] In order to make the purpose, features and advantages of the present invention more obvious and understandable, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the following The described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

[0056] see figure 1 , figure 1 It is...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a program similarity detection method and device, electronic equipment and a storage medium, and the method comprises the steps: extracting a source function and correspondingfunction basic information from a preset source program, and generating a disassembly instruction text; screening a preset target program based on the function basic information and the disassemblinginstruction text to obtain a potential similarity function, and determining a target source function; splitting the target source function into a plurality of source program fragments; splitting the potential similarity function into a plurality of target program fragments; respectively calculating the similarity between any source program fragment and the target program fragment to obtain a similarity score; determining the number of similar target program fragments of which the similarity score reaches a first preset threshold; determining the potential similarity function of which the number of the similar target program fragments reaches a second preset threshold value as a similarity function; and judging whether the source program and the target program have an association relationship or not according to the number of the similarity functions. The technical problems of low analysis speed and low analysis accuracy in the prior art are solved.

Description

technical field [0001] The invention relates to the technical field of program detection, in particular to a program similarity detection method, device, electronic equipment and storage medium. Background technique [0002] Nowadays, all kinds of malicious codes such as ransomware are raging on the Internet. It is a technical difficulty to carry out further correlation mining based on the obtained malicious code samples, and then provide support for emergency response. Writing program code usually does not start from scratch, but implements coding on the basis of existing code or by reusing some existing functional code. Based on this, analysts can carry out reuse function code detection based on the obtained program code, and then provide support for malicious attack code correlation analysis or vulnerability code detection and tracking. To achieve the above correlation or tracking analysis goals, it is necessary to analyze the code To quickly and effectively discover fun...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/56
CPCG06F21/563
Inventor 蒙家晓蒋屹新陈霖杜金燃洪超关泽武黄建理
Owner ELECTRIC POWER RESEARCH INSTITUTE, CHINA SOUTHERN POWER GRID CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products