Apparatus and method for identifying related code variants in binaries

US9003529B2 · kind B2 · utility

Assignee

• THE JOHNS HOPKINS UNIVERSITY · US

Inventors

• Margaret F. Lospinuso · Chapel Hill, US
• David M. Patrone · Ellicott City, US
• David P. Silberberg · Baltimore, US
• Jonathan D. Cohen · Tel Aviv-Yafo, IL
• Ryan W. Gardner · Columbia, US
• Laura J. Glendenning · Columbia, US
• Sakunthala Harshavardhana · Marlboro, US
• Robert T. Hider · Silver Spring, US
• C. Durward McDonell, III · Olney, US
• Dennis S. Patrone · Buffalo, US
• Nathan S. Reller · Baltimore, US
• Benjamin R. Salazar · Laurel, US

Key dates

• Filing date: Mar 4, 2013
• Grant date: Apr 7, 2015
• Expiry date: Jul 12, 2033

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F21/561
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

An apparatus for identifying related code variants may include processing circuitry configured to execute instructions for receiving query binary code, processing the query binary code to generate one or more query code fingerprints comprising compressed representations of respective functional components of the query binary code, comparing the one or more query code fingerprints to at least some reference code fingerprints stored in a database to determine a similarity measure between the one or more query code fingerprints and at least some of the reference code fingerprints, and preparing at least one report based on the similarity measure.