Welcome to Journal of University of Chinese Academy of Sciences,Today is

›› 2009, Vol. 26 ›› Issue (4): 549-554.DOI: 10.7523/j.issn.2095-6134.2009.4.017

• Research Articles • Previous Articles     Next Articles

Algorithm for structural comparison and its software implement

SONG Yang, ZHANG Yu-Qing   

  1. National Computer Network Intrusion Protection Center, Graduate University of the Chinese Academy of Sciences, Beijing 100049, China
  • Received:2008-05-28 Revised:2009-02-20 Online:2009-07-15

Abstract:

Structural comparison is one of the core components of patch comparison. This paper improves the classic algorithm of structural comparison. Compared with the classic algorithm, the improved algorithm calculates the value of similarity between functions. Therefore, the problem of contradiction between the consistency and exclusiveness of signature is solved. Furthermore, a structural comparison tool named as NBD (NCNIPC binary differ), which gets a higher score compared with other popular tools during the exam towards some patches of microsoft, is constructed based on the improved algorithm.

Key words: patches comparison, security vulnerability, reverse engineering, structural comparison

CLC Number: