안드로이드 스마트폰에서 Dex 파일들의 유사도 비교 연구
A Study on Comparing Similarity of Dex files on Android Smartphones
2
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
안드로이드 앱은 역분석되기 쉽기 때문에 불법 도용 및 표절에 의한 저작권 침해가 급증하고 있다. 본 논문에서는 안드로이드 앱 저작권 침해 여부를 탐지하기 위한, 앱들 간의 유사성을 비교하는 3가지 방법을 제안한다. 제안기법은 안드로이드 앱의 실행 파일인 Dex 파일을 정적으로 분석하여 유사도를 측정한다. 첫 번째 기법에서는, Dex 파일의 바이트코드를 자바 소스코드로 역컴파일한 후, 역컴파일된 소스코드 간의 유사도를 측정한다. 두 번째 기법에서는, Dex 파일에 포함된 문자열들을 추출하고 문자열 비교를 기반으로 앱 간의유사도를 비교한다. 마지막으로 Dex 파일에 정의된 메서드들로부터 특징정보를 추출하여 유사도를 비교한다. 실험을 통해 각 제안기법의 성능을 신뢰성 및 강인성 측면에서 평가하였다.
Abstract
Copyright infringement in Android applications is a growing problem because Android applications can be easily reverse engineered and pirated. In this paper, we propose three techniques for comparing similarity between Android applications in order to detect the theft of the applications. The proposed techniques statically analyze the Dalvik VM executable files in the Dalvik Executable (.dex) format, and measure similarity between the executable files (DEX files). The first technique decompiles DEX (VM bytecode) files into corresponding Java source codes and computes similarity between the decompiled source codes. The second technique extracts string information contained in DEX files and calculates similarity between applications based on the string information. The last technique extracts methods’ features defined DEX files and compares similarity between applications based on the features. We evaluate the performance of the proposed techniques in terms of credibility and resilience by carrying out some experiments.
참고문헌 (14)
- Tamada, H., "Design and Evaluation of Birthmarks for Detecting Theft of Java Programs", Proceedings of the IASTED International Conference on Software Engineering (IASTED SE 2004), pp.569~575 (2004)
- Myles, G., "K-gram based software birthmarks", Proceedings of the 2005 ACM Symposium on Applied Computing (SAC’05) (2005)
- Myles, G, "Detecting Software Theft via Whole Program Path Birthmarks", Proceedings of the Information Security Conference (2004)
- Tamada, H, "Dynamic Software Birthmarks to Detect the Theft of Windows Applications", Proceedings of the International Symposium on Future Software Technology 2004 (ISFST 2004) (2004)
- Wang, X., "Detecting Software Theft via System Call Based Birthmarks", Proceedings of the Annual Computer Security Applications Conference (ACSAC '09) (2009)
- Schuler, D, "Detecting Software Theft with API Call Sequence Sets", Proceedings of the 8th Workshop Software Reengineering (2006)
- Choi, S, "A Static Birthmark of Binary Executables Based on API Call Structure", Proceedings of the 12th Asian Computing Science Conference (ASIAN) (2007)
- Myles, G, "Software Theft Detection through Program Identification", PhD, Department of Computer Science, pp.2006
- Zhou, X, "A Combined Static and Dynamic Software Birthmark Based on Component Dependence Graph", Proceedings of the 4th Int'l Conf. on Intelligent Information Hiding and Multimedia Signal Processing (IIH-MSP), pp.1416~1421 (2008)
- Design and evaluation of dynamic software birthmarks based on api calls, "Tamada, H", Nara Institute of Science and Technology, ~ (2007)
- Collberg, C. S, "Watermarking, Tamper-proofing, and Obfuscation-Tools for Software Protection", IEEE Trans. on Software Engineering, 28(8) (2002)
- "Dex-Dalvik Executable Format"[URL]
- "Java decompiler : JD-GUI"[URL]
- "A system for detecting software plagiarism - MOSS"[URL]