Determining the similarity of binary executables

    公开(公告)号:US10685113B2

    公开(公告)日:2020-06-16

    申请号:US15676329

    申请日:2017-08-14

    Applicant: Apple Inc.

    Abstract: In some implementations, a computing device can determine the similarity of binary executables. For example, the computing device can receive an application, including a binary executable. The computing device can generate function signatures for the functions called within the binary executable. The computing device can generate a locality sensitive hash value for the application based on the function signatures. The computing device can group applications based on the locality sensitive hash value generated for each application. The computing device can compare the function signatures of the binary executables of the applications within a group to determine the similarity of the applications. If two applications have binary executables that are over a threshold percentage of similarity, the two applications can be identified as clones of each other.

    Determining the Similarity of Binary Executables

    公开(公告)号:US20190005242A1

    公开(公告)日:2019-01-03

    申请号:US15676329

    申请日:2017-08-14

    Applicant: Apple Inc.

    Abstract: In some implementations, a computing device can determine the similarity of binary executables. For example, the computing device can receive an application, including a binary executable. The computing device can generate function signatures for the functions called within the binary executable. The computing device can generate a locality sensitive hash value for the application based on the function signatures. The computing device can group applications based on the locality sensitive hash value generated for each application. The computing device can compare the function signatures of the binary executables of the applications within a group to determine the similarity of the applications. If two applications have binary executables that are over a threshold percentage of similarity, the two applications can be identified as clones of each other.

Patent Agency Ranking