@article{ART003383211},
author={Yea Dong Yoo and Byeonghyeon Cho and Sooyoung Jang and Seungho Yang and Changbeom Choi},
title={Obfuscation-Resilient Behavioral Similarity Analysis of Simulation Software Using Event Logs},
journal={ Journal of Software Forensics},
issn={3092-541X},
year={2026},
volume={22},
number={3},
pages={121-132}
TY - JOUR
AU - Yea Dong Yoo
AU - Byeonghyeon Cho
AU - Sooyoung Jang
AU - Seungho Yang
AU - Changbeom Choi
TI - Obfuscation-Resilient Behavioral Similarity Analysis of Simulation Software Using Event Logs
JO - Journal of Software Forensics
PY - 2026
VL - 22
IS - 3
PB - Korea Software Assessment and Valuation Society
SP - 121
EP - 132
SN - 3092-541X
AB - In disputes involving simulation software, source code may be unavailable and derivative indications must be examined from execution logs. Label renaming and same-time record splitting, however, can invalidate label-dependent similarity metrics. This paper combines label-free state signatures and Hungarian assignment with stutter merging inspired by weak bisimulation, and specifies a conditional restoration procedure and its applicability conditions. We evaluated one reference implementation and six comparison variants generated with pyjevsim. The raw-label similarity of the renamed variant was 0.133, nearly identical to 0.132 for the independent implementation; after alignment, the scores became 1.000 and 0.847, respectively. Oracle checks confirmed that the renamed, split, and combined variants matched the defined log transformations. These results show that the method can restore concealed behavioral similarity under the evaluated obfuscation conditions and support technical analysis of possible derivation.
KW - Software forensics;Event log;Software similarity;State alignment;Weak bisimulation
DO -
UR -
ER -
Yea Dong Yoo, Byeonghyeon Cho, Sooyoung Jang, Seungho Yang and Changbeom Choi. (2026). Obfuscation-Resilient Behavioral Similarity Analysis of Simulation Software Using Event Logs. Journal of Software Forensics, 22(3), 121-132.
Yea Dong Yoo, Byeonghyeon Cho, Sooyoung Jang, Seungho Yang and Changbeom Choi. 2026, "Obfuscation-Resilient Behavioral Similarity Analysis of Simulation Software Using Event Logs", Journal of Software Forensics, vol.22, no.3 pp.121-132.
Yea Dong Yoo, Byeonghyeon Cho, Sooyoung Jang, Seungho Yang, Changbeom Choi "Obfuscation-Resilient Behavioral Similarity Analysis of Simulation Software Using Event Logs" Journal of Software Forensics 22.3 pp.121-132 (2026) : 121.
Yea Dong Yoo, Byeonghyeon Cho, Sooyoung Jang, Seungho Yang, Changbeom Choi. Obfuscation-Resilient Behavioral Similarity Analysis of Simulation Software Using Event Logs. 2026; 22(3), 121-132.
Yea Dong Yoo, Byeonghyeon Cho, Sooyoung Jang, Seungho Yang and Changbeom Choi. "Obfuscation-Resilient Behavioral Similarity Analysis of Simulation Software Using Event Logs" Journal of Software Forensics 22, no.3 (2026) : 121-132.
Yea Dong Yoo; Byeonghyeon Cho; Sooyoung Jang; Seungho Yang; Changbeom Choi. Obfuscation-Resilient Behavioral Similarity Analysis of Simulation Software Using Event Logs. Journal of Software Forensics, 22(3), 121-132.
Yea Dong Yoo; Byeonghyeon Cho; Sooyoung Jang; Seungho Yang; Changbeom Choi. Obfuscation-Resilient Behavioral Similarity Analysis of Simulation Software Using Event Logs. Journal of Software Forensics. 2026; 22(3) 121-132.
Yea Dong Yoo, Byeonghyeon Cho, Sooyoung Jang, Seungho Yang, Changbeom Choi. Obfuscation-Resilient Behavioral Similarity Analysis of Simulation Software Using Event Logs. 2026; 22(3), 121-132.
Yea Dong Yoo, Byeonghyeon Cho, Sooyoung Jang, Seungho Yang and Changbeom Choi. "Obfuscation-Resilient Behavioral Similarity Analysis of Simulation Software Using Event Logs" Journal of Software Forensics 22, no.3 (2026) : 121-132.
