摘要
讨论了可执行文件的比较方法,在基于图的指令相似性比较和结构化二进制比较的基础上给出了一种改进的可执行文件比较算法。该算法首先利用结构化比较获得一组固定点,再从每个固定点开始进行指令相似性比较。该算法融合了两种方法的优点,并使得它们相互弥补了各自的不足,减少了比较结果漏报和误报的可能性。
Methods of comparing two different versions of an executable object are discussed. And an improved algorithm based on the method of instructions similarity comparison and the method of structural comparison is presented. This algorithm first created some fix points by structural matching, and then compared instructions＇ similarity from every fix point. While making remedies to the disadvantages of both methods, this algorithm melts the bright side of each. The outcome of the comparison is thus of few false positives and false negatives.
出处
《计算机工程与设计》
CSCD
北大核心
2007年第2期257-260,共4页
Computer Engineering and Design
关键词
控制流程图
调用关系图
指令相似
结构化签名
可执行文件
control flow graph
call graph
instructions similarity
structural signature
executable objects
