본문 바로가기
  • Home

A Module-based System for Measuring Similarity of Windows Executable Files

  • Journal of Software Assessment and Valuation
  • Abbr : JSAV
  • 2014, 10(2), pp.9-15
  • Publisher : Korea Software Assessment and Valuation Society
  • Research Area : Engineering > Computer Science
  • Received : December 29, 2014
  • Accepted : December 30, 2014
  • Published : December 31, 2014

Yesol Kim 1 CHO SANG WOOK 1 Seongasoo Park 1 Dong-Kyu Chae 1 SEONG JE CHO 1 Hwansoo Han 2 Sangwook Kim 3 Sangchul Han 3

1단국대학교
2
3단국대

ABSTRACT

This paper presents an effective system to measure and compare similarity between Microsoft Windows executable files. When a user inputs two target binary programs in the web interface, the system computes the similarity between them and shows the results. We currently implement four algorithms (modules) for measuring similarity of Windows executable files, and a user can obtain the similarity computed using each algorithm. Our system also provides an integrated similarity measure that quantifies the similarity between two files using the four algorithms at the same time. For the integrated similarity measure, a user can assign a weight for each algorithm. Since we develop each algorithm as an extensible module, it is easy to improve an algorithm or add a new one.

KEYWORDS

Citation status

* References for papers published after 2023 are currently being built.