Interpretation-enabled Software Reuse Detection Based on a Multi-Level Birthmark ModelTechnical Track
Thu 27 May 2021 01:15 - 01:35 at Blended Sessions Room 1 - 2.2.1. Modularization and Reusability
Software reuse, especially partial reuse, poses legal and security threats to software development. Since its source codes are usually unavailable, software reuse is hard to be detected with interpretation. On the other hand, current approaches suffer from poor detection accuracy and efficiency, far from satisfying practical demands. To tackle these problems, in this paper, we propose \textit{ISRD}, an interpretation-enabled software reuse detection approach based on a multi-level birthmark model that contains function level, basic block level, and instruction level. To overcome obfuscation caused by cross-compilation, we represent function semantics with Minimum Branch Path (MBP) and perform normalization to extract core semantics of instructions. For efficiently detecting reused functions, a process for ``intent search based on anchor recognition'' is designed to speed up reuse detection. It uses strict instruction match and identical library call invocation check to find anchor functions (in short anchors) and then traverses neighbors of the anchors to explore potentially matched function pairs. Extensive experiments based on two real-world binary datasets reveal that \textit{ISRD} is interpretable, effective, and efficient, which achieves $97.2%$ precision and $94.8%$ recall. Moreover, it is resilient to cross-compilation, outperforming state-of-the-art approaches.
Wed 26 MayDisplayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
12:55 - 13:55 | 2.2.1. Modularization and ReusabilitySEIP - Software Engineering in Practice / Technical Track at Blended Sessions Room 1 +12h Chair(s): Maria Teresa Baldassarre Department of Computer Science, University of Bari | ||
12:55 20mPaper | CENTRIS: A Precise and Scalable Approach for Identifying Modified Open-Source Software ReuseTechnical Track Technical Track Seunghoon Woo Korea University, Sunghan Park Korea University, Seulbae Kim Georgia Institute of Technology, Heejo Lee Korea University, Hakjoo Oh Korea University Pre-print Media Attached | ||
13:15 20mPaper | Interpretation-enabled Software Reuse Detection Based on a Multi-Level Birthmark ModelTechnical Track Technical Track Xi Xu Xi'an Jiaotong University, Qinghua Zheng MOEKLINNS Lab, Department of Computer Science and Technology, Xi’an Jiaotong University, 710049, China, Zheng Yan Xidian University, China; Aalto University, Finland, Ming Fan Xi'an Jiaotong University, Ang Jia Xi'an Jiaotong University, Ting Liu Xi'an Jiaotong University Pre-print Media Attached | ||
13:35 20mPaper | Search-Based Software Re-Modularization: A Case Study at AdyenSEIP SEIP - Software Engineering in Practice Casper Schröder Adyen N.V., Adriaan van der Feltz Adyen N.V., Annibale Panichella Delft University of Technology, Maurício Aniche Delft University of Technology Pre-print Media Attached |
Thu 27 MayDisplayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
00:55 - 01:55 | 2.2.1. Modularization and ReusabilitySEIP - Software Engineering in Practice / Technical Track at Blended Sessions Room 1 | ||
00:55 20mPaper | CENTRIS: A Precise and Scalable Approach for Identifying Modified Open-Source Software ReuseTechnical Track Technical Track Seunghoon Woo Korea University, Sunghan Park Korea University, Seulbae Kim Georgia Institute of Technology, Heejo Lee Korea University, Hakjoo Oh Korea University Pre-print Media Attached | ||
01:15 20mPaper | Interpretation-enabled Software Reuse Detection Based on a Multi-Level Birthmark ModelTechnical Track Technical Track Xi Xu Xi'an Jiaotong University, Qinghua Zheng MOEKLINNS Lab, Department of Computer Science and Technology, Xi’an Jiaotong University, 710049, China, Zheng Yan Xidian University, China; Aalto University, Finland, Ming Fan Xi'an Jiaotong University, Ang Jia Xi'an Jiaotong University, Ting Liu Xi'an Jiaotong University Pre-print Media Attached | ||
01:35 20mPaper | Search-Based Software Re-Modularization: A Case Study at AdyenSEIP SEIP - Software Engineering in Practice Casper Schröder Adyen N.V., Adriaan van der Feltz Adyen N.V., Annibale Panichella Delft University of Technology, Maurício Aniche Delft University of Technology Pre-print Media Attached |