云环境下基于函数编码的移动应用克隆检测

doi:10.11959/j.issn.1000-436x.2019106

通信学报 ›› 2019, Vol. 40 ›› Issue (8): 60-71.doi: 10.11959/j.issn.1000-436x.2019106

云环境下基于函数编码的移动应用克隆检测

杨佳¹,付才¹(),韩兰胜¹,鲁宏伟¹,刘京亮²

¹ 华中科技大学计算机学院，湖北武汉 430074
² 北京航空精密机械研究所，北京 100876

修回日期:2019-04-06 出版日期:2019-08-25 发布日期:2019-08-30
作者简介:杨佳（1993- ），女，湖北武汉人，华中科技大学博士生，主要研究方向为网络空间安全中的恶意代码的克隆搜索、恶意代码在移动互联网中的传播以及大数据的隐私保护。|付才（1976- ），男，湖北武汉人，博士，华中科技大学教授，主要研究方向为移动网络安全、路由器算法以及分布式计算。|韩兰胜（1973- ），男，湖北武汉人，博士，华中科技大学副教授，主要研究方向为网络安全、恶意代码检测以及大数据安全。|鲁宏伟（1964- ），男，湖北武汉人，博士，华中科技大学教授，主要研究方向为网络空间安全、IoT、社交网络、安全协议分析。|刘京亮（1984- ），男，北京人，北京航空精密机械研究所高级工程师，主要研究方向为非接触测量方法、测量机软件工程、智能检测技术。
基金资助:
国家自然科学基金资助项目(61572222);国家自然科学基金资助项目(61772194);国家自然科学基金资助项目(61272405)

Function encoding based approach for App clone detection in cloud environment

Jia YANG¹,Cai FU¹(),Lansheng HAN¹,Hongwei LU¹,Jingliang LIU²

¹ School of Computer Science ＆Technology,Huazhong University of Science and Technology,Wuhan 430074,China
² Avic Beijing Precision Engineering Institue Aircraft Industry,Beijing 100876,China

Revised:2019-04-06 Online:2019-08-25 Published:2019-08-30
Supported by:
The National Natural Science Foundation of China(61572222);The National Natural Science Foundation of China(61772194);The National Natural Science Foundation of China(61272405)

摘要/Abstract

摘要：

提出了一种云环境下基于汇编函数层编码的App克隆检测方法，实现了Android应用克隆检测原型系统Pentagon。首先，针对App执行文件代码设计了二进制函数基本代码块特征提取方法；其次，提出了一种对二进制函数进行单调编码的算法，基于图形嵌入原理，融合执行流程图与函数代码基本块特征，形成每个函数代码的投影特征；最后，提出了一种高效的第三方库函数过滤方法，进一步提升了克隆检测效果。实验证明，所提方法具有97.6%的准确率，在实验条件下判定一个App克隆对只需要79 ms，能够支撑云环境下应用市场级别的大规模克隆检测。

关键词: 克隆检测, 函数编码, 控制流程图, 知识产权保护

Abstract:

An efficient function-based encoding scheme in the cloud environment for detecting the cloned Apps was designed,called Pentagon.Firstly,a basic block feature extraction method was proposed.Secondly,a monotonic encoding algorithm for the App function was designed,which encoded the function based on the control flow graph structure and basic block attributes.Finally,a three-party libraries filtering method was proposed by using an efficient clustering algorithm based on the function feature.Experiments verified the effectiveness of the proposed scheme.The average search time is close to 79 ms,and the clone detection accuracy achieves 97.6%.

Key words: clone detection, function encoding, CFG, intellectual property right protection

中图分类号:

TP391.4

杨佳,付才,韩兰胜,鲁宏伟,刘京亮. 云环境下基于函数编码的移动应用克隆检测[J]. 通信学报, 2019, 40(8): 60-71.

Jia YANG,Cai FU,Lansheng HAN,Hongwei LU,Jingliang LIU. Function encoding based approach for App clone detection in cloud environment[J]. Journal on Communications, 2019, 40(8): 60-71.

图/表 12

图1

图2

图3

图4

图5

图6

图7

图8

图9

图10

图11

表1

参考文献 24

[1]	CHEN Y , GAN L , ZHANG S . Plagiarism detection in homework based on image hashing[C]// The Third International Conference of Pioneering Computer Scientists,Engineers and Educator. ICPCSEE, 2017: 424-432.
[2]	ANDREWS S , VARUNBABU B S , SUBASH U . Finding the high probabilistic potential fishing zone by accelerated SVM classification[J]. International Journal of Information and Communication Technology, 2017,11(4): 576-585.
[3]	PAPALEXAKIS E E , FALOUTSOS C , SIDIROPOULOS ND . Tensors for data mining and data fusion:models,applications and scalable algorithms[J]. ACM Transaction Intelligence,System,Technology, 2017,8(16): 1-4.
[4]	FU D , XU Y . WASTK:a weighted abstract syntax tree kernel method for source code plagiarism detection[J]. Scientific Programming, 2017: 1-8.
[5]	FANG L , LIN Y , YANG J . An efficient and packing-resilient two-phase Android cloned application detection approach[J]. Mobile Information Systems, 2017: 1-12.
[6]	DU Y , WANG J LI Q . An Android malware detection approach using community structures of weighted function call graphs[J].,2017:1. IEEE Access, 2017:1.
[7]	LYU F , LIN Y , YANG J . Suidroid:an efficient hardening-resilient approach to Android App clone detection[C]// 2016 IEEE Trustcom BigdataSE ISPA. IEEE, 2016: 511-518.
[8]	SIVIC J , ZISSERMAN A , . Video google:a text retrieval approach to object matching in videos[C]// The Ninth IEEE International Conference on Computer Vision. IEEE, 2003: 1470-1477.
[9]	SOH C , TAN H B K , ARNAATOVICH Y L . Detecting clones in Android applications through analyzing user interfaces[C]// 2015 IEEE 23rd International Conference on Program Comprehension. IEEE, 2015: 163-173.
[10]	CHEN Q , WANG J , WANG Y . An online approach for detecting repackaged Android applications based on multi-user collaboration[C]// Ubiquitous Intelligence and Computing and 2015 IEEE International Conference on Autonomic and Trusted Computing. 2016: 312-315.
[11]	DREBIN A . Reverse engineering,malware and goodware analysis of Android applications and more[R]. Technical Report, 2013.
[12]	ZHAUNIAROVICH Y , GADYATSKAYA O , CRISPO B . Fsquadra:fast detection of repackaged applications[R]. Working Conference on Data and Applications Security and Privacy, 2014.
[13]	KHOO W , MYCROFT M A , ANDERSON R . Rendezvous:a search engine for binary code[C]// The 10th Working Conference on Mining Software Repositories (MSR). IEEE, 2013: 329-338.
[14]	PEWNY J , GARMANY B , GAWLIK R ,et al. Cross-architecture bug search in binary executables[C]// 2015 IEEE Symposium on Security and Privacy. IEEE, 2015: 709-724.
[15]	FENG Q , ZHOU R . Scalable graph-based bug search for malware images[C]// The 2016 ACM SIGSA. 2016: 480-491.
[16]	ZHOU W , ZHOU Y,GRACEM . fast,scalable detection of piggy- backed mobile applications[C]// The Third ACM Conference on Data and Application Security and Privacy. 2013: 185-196.
[17]	DAVID Y , YAHAV E . Tracelet-based code search in executables[C]// The 35th ACM SIGPLAN Conference on Programming Language Design and Implementation. 2014: 349-360.
[18]	ARP D , SPREITZENBARTH M , HUBNER M . Drebin:effective and explainable detection of Android malware in your pocket[C]// In Network and Distributed System Security Symposium. 2014.
[19]	LUKAS W , MATTHIAS N , MARTINA L . Andrubis:Android malware under the magnifying glass[R]. Vienna Univeristy of Technology, 2014.
[20]	ENCK W , GILBERT P , CHUN B . Taintdroid:an information tracking system for realtime privacy monitoring on smartphones[C]// The 9th USENIX Conference on Operating Systems Design and Implementation. 2010: 393-407.
[21]	TANG J QU M , . LINE:large-scale information network embedding[C]// The 24th International Conference on World Wide Web. 2015: 1067-1077.
[22]	LIU Z , CHEN C . POSTER:neural network-based graph embedding for malicious accounts detection[C]// The 2017 ACM CCS. 2017: 2543-2545.
[23]	CHEN K , LIU P , ZHANG Y . Achieving accuracy and scalability simultaneously in detecting application clones on android markets[C]// 36th International Conference on Software Engineering. 2014: 175-186.
[24]	WANG H , GUO Y , MA Z . Wukong:a scalable and accurate two-phase approach to Android App clone detection[C]// The 2015 Internatinal Symposium on Software,Testing and Analysis. ACM, 2015: 71-82.

App	检测时间/s	预处理时间/s
Pentagon	0.079	0.74
FSquaDRA	0.4	4
Centroid	0.085	5.82
Wukong	0.29	0.99

云环境下基于函数编码的移动应用克隆检测

Function encoding based approach for App clone detection in cloud environment

在线阅读

PDF下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 12

参考文献 24

相关文章 15

Metrics

推荐阅读 0

[1]	刘威, 陈成, 江锐, 卢涛. 四通道无监督学习图像去雾网络[J]. 通信学报, 2022, 43(10): 210-222.
[2]	廖育荣, 王海宁, 林存宝, 李阳, 方宇强, 倪淑燕. 基于深度学习的光学遥感图像目标检测研究进展[J]. 通信学报, 2022, 43(5): 190-203.
[3]	吴德阳, 胡森, 王苗苗, 金海波, 曲长波, 唐勇. 基于区域异或和三值量化的高分辨零水印算法[J]. 通信学报, 2022, 43(2): 208-222.
[4]	张莉涓, 范明秋, 雷磊, 王勇, 袁代数. 捕获效应下基于比特检测的多分支树RFID标签识别协议[J]. 通信学报, 2021, 42(11): 205-216.
[5]	陈志旺, 张忠新, 宋娟, 雷海鹏, 彭勇. 在线目标分类及自适应模板更新的孪生网络跟踪算法[J]. 通信学报, 2021, 42(8): 151-163.
[6]	杨毅宇, 周威, 赵尚儒, 刘聪, 张宇辉, 王鹤, 王文杰, 张玉清. 物联网安全研究综述：威胁、检测与防御[J]. 通信学报, 2021, 42(8): 188-205.
[7]	陈晨, 肜娅峰, 季超群, 陈德运, 何勇军. 基于深层信息散度最大化的说话人确认方法[J]. 通信学报, 2021, 42(7): 231-237.
[8]	郭璠, 张泳祥, 唐琎, 李伟清. YOLOv3-A：基于注意力机制的交通标志检测网络[J]. 通信学报, 2021, 42(1): 87-99.
[9]	王洪雁,王拓,潘勉,汪祖民. 基于伽马范数最小化的图像去噪算法[J]. 通信学报, 2020, 41(10): 222-234.
[10]	戚琦,马迎新,王敬宇,孙海峰,廖建新. 面向算力受限边缘环境的双分支多尺度感知人脸检测网络[J]. 通信学报, 2020, 41(8): 165-174.
[11]	王晓飞,胡凡奎,黄硕. 基于分布信息直觉模糊c均值聚类的红外图像分割算法[J]. 通信学报, 2020, 41(5): 120-129.
[12]	龙华,杨明亮,邵玉斌. 基于特征流融合的带噪语音检测算法[J]. 通信学报, 2020, 41(4): 134-142.
[13]	李洪均,李超波,张士兵. 噪声稳健性的卡方生成对抗网络[J]. 通信学报, 2020, 41(3): 33-44.
[14]	丁恩杰,刘忠育,刘亚峰,郁万里. 基于多维度和多模态信息的视频描述方法[J]. 通信学报, 2020, 41(2): 36-43.
[15]	杨燕,王志伟. 基于补偿透射率和自适应雾浓度系数的图像复原算法[J]. 通信学报, 2020, 41(1): 66-75.