title: ÐÐ¿ÑÐµÐ´ÐµÐ»ÐµÐ½Ð¸Ðµ ÑÑ Ð¾Ð¶ÐµÑÑÐ¸ ÑÑÐ°Ð³Ð¼ÐµÐ½ÑÐ¾Ð² Ð±Ð¸Ð½Ð°ÑÐ½ÑÑ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½ÑÑ ÐºÐ¾Ð´Ð¾Ð² Ñ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸ÐµÐ¼ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° ÑÐ¿ÐµÑÐ¸Ð°Ð»Ð¸ÑÑÐ°
titleType: Subtitle
title: Binary code similarity detection based on machine learning methods
Creators: name: ÐÑÐ¸Ð±ÐºÐ¾Ð², ÐÐ¸ÐºÐ¸ÑÐ°
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2023
Subjects: ÐÐµÐ¹ÑÐ¾Ð½Ð½ÑÐµ ÑÐµÑÐ¸
ÐÐ°ÑÐ¸Ð½Ð½Ð¾Ðµ Ð¾Ð±ÑÑÐµÐ½Ð¸Ðµ
Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½ÑÐµ ÐºÐ»Ð¾Ð½Ñ
ÑÐ¸Ð½ÑÐ°ÐºÑÐ¸ÑÐµÑÐºÐ°Ñ ÑÑ Ð¾Ð¶ÐµÑÑÑ
ÑÐµÐ¼Ð°Ð½ÑÐ¸ÑÐµÑÐºÐ°Ñ ÑÑ Ð¾Ð¶ÐµÑÑÑ
Ð±Ð¸Ð½Ð°ÑÐ½ÑÐ¹ ÐºÐ¾Ð´
Ð°Ð±ÑÑÑÐ°ÐºÑÐ½Ð¾Ðµ ÑÐ¸Ð½ÑÐ°ÐºÑÐ¸ÑÐµÑÐºÐ¾Ðµ Ð´ÐµÑÐµÐ²Ð¾
Ð²Ð¾ÑÑÑÐ°Ð½Ð¾Ð²Ð»ÐµÐ½Ð½ÑÐ¹ ÐºÐ¾Ð´
code clones
syntactic similarity
semantic similarity
binary code
abstract syntax tree
pseudocode

description: Ð¦ÐµÐ»ÑÑ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ðµ ÑÑÐ½ÐºÑÐ¸Ð¾Ð½Ð°Ð»ÑÐ½Ð¾Ð¹ ÑÑÐ¾Ð¶ÐµÑÑÐ¸ ÑÑÐ°Ð³Ð¼ÐµÐ½ÑÐ¾Ð² Ð±Ð¸Ð½Ð°ÑÐ½ÑÑ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½ÑÑ ÐºÐ¾Ð´Ð¾Ð² Ñ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸ÐµÐ¼ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð¼Ð°ÑÐ¸Ð½Ð½Ð¾Ð³Ð¾ Ð¾Ð±ÑÑÐµÐ½Ð¸Ñ. ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÑÑÑÑ Ð¼ÐµÑÐ¾Ð´Ñ ÑÑÐ°Ð²Ð½ÐµÐ½Ð¸Ñ ÑÑÐ°Ð³Ð¼ÐµÐ½ÑÐ¾Ð² Ð±Ð¸Ð½Ð°ÑÐ½ÑÑ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½ÑÑ ÐºÐ¾Ð´Ð¾Ð² Ñ ÑÑÐµÑÐ¾Ð¼ ÑÐµÐ¼Ð°Ð½ÑÐ¸ÑÐµÑÐºÐ¾Ð¹ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¸ Ð¾ Ð½Ð¸Ñ. ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: 1. ÐÐ½Ð°Ð»Ð¸Ð· Ð¿ÑÐ¾ÑÐµÑÑÐ° Ð¾Ð¿ÑÐµÐ´ÐµÐ»ÐµÐ½Ð¸Ñ ÑÑÐ¾Ð¶Ð¸Ñ ÑÑÐ°Ð³Ð¼ÐµÐ½ÑÐ¾Ð² Ð±Ð¸Ð½Ð°ÑÐ½ÑÑ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½ÑÑ ÐºÐ¾Ð´Ð¾Ð² Ð¸ ÐµÐ³Ð¾ Ð¿ÑÐ¸Ð¼ÐµÐ½ÐµÐ½Ð¸Ñ Ð² ÐºÐ¾Ð½ÑÐµÐºÑÑÐµ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸. 2. Ð¡ÑÐ°Ð²Ð½Ð¸ÑÐµÐ»ÑÐ½ÑÐ¹ Ð°Ð½Ð°Ð»Ð¸Ð· ÑÑÑÐµÑÑÐ²ÑÑÑÐ¸Ñ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð¾Ð¿ÑÐµÐ´ÐµÐ»ÐµÐ½Ð¸Ñ ÑÑÐ¾Ð¶ÐµÑÑÐ¸ ÑÑÐ°Ð³Ð¼ÐµÐ½ÑÐ¾Ð² Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½ÑÑ ÐºÐ¾Ð´Ð¾Ð², Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ðµ Ð¸Ñ Ð´Ð¾ÑÑÐ¾Ð¸Ð½ÑÑÐ² Ð¸ Ð½ÐµÐ´Ð¾ÑÑÐ°ÑÐºÐ¾Ð². 3. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼ÐµÑÐ¾Ð´Ð° ÑÑÐ°Ð²Ð½ÐµÐ½Ð¸Ñ ÑÑÐ°Ð³Ð¼ÐµÐ½ÑÐ¾Ð² Ð±Ð¸Ð½Ð°ÑÐ½ÑÑ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½ÑÑ ÐºÐ¾Ð´Ð¾Ð², Ð¿Ð¾Ð·Ð²Ð¾Ð»ÑÑÑÐµÐ³Ð¾ Ð´ÐµÐ»Ð°ÑÑ Ð²ÑÐ²Ð¾Ð´Ñ Ð¾Ð± Ð¸Ñ ÑÑÐ¾Ð¶ÐµÑÑÐ¸. 4. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¿ÑÐ¾ÑÐ¾ÑÐ¸Ð¿Ð° Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½Ð¾Ð³Ð¾ ÑÑÐµÐ´ÑÑÐ²Ð°, ÑÐµÐ°Ð»Ð¸Ð·ÑÑÑÐµÐ³Ð¾ Ð¿ÑÐµÐ´Ð»Ð°Ð³Ð°ÐµÐ¼ÑÐ¹ Ð¼ÐµÑÐ¾Ð´, Ð¿ÑÐ¾Ð²ÐµÑÐºÐ° ÐµÐ³Ð¾ ÑÐ°Ð±Ð¾ÑÐ¾ÑÐ¿Ð¾ÑÐ¾Ð±Ð½Ð¾ÑÑÐ¸ Ð¸ Ð¾ÑÐµÐ½ÐºÐ° ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸. Ð ÑÐ°Ð±Ð¾ÑÐµ Ð¿ÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ñ Ð°ÐºÑÑÐ°Ð»ÑÐ½ÑÐµ Ð¼ÐµÑÐ¾Ð´Ñ Ð¾Ð¿ÑÐµÐ´ÐµÐ»ÐµÐ½Ð¸Ñ ÑÑÐ¾Ð¶Ð¸Ñ ÑÑÐ°Ð³Ð¼ÐµÐ½ÑÐ¾Ð² Ð±Ð¸Ð½Ð°ÑÐ½ÑÑ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½ÑÑ ÐºÐ¾Ð´Ð¾Ð². Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐ°Ð±Ð¾ÑÑ Ð¿ÑÐµÐ´Ð»Ð¾Ð¶ÐµÐ½ Ð¼ÐµÑÐ¾Ð´ Ð¾Ð¿ÑÐµÐ´ÐµÐ»ÐµÐ½Ð¸Ñ ÑÐ°ÐºÐ¸Ñ ÑÑÐ°Ð³Ð¼ÐµÐ½ÑÐ¾Ð², Ð¿ÑÐ¾Ð¸Ð·Ð²ÐµÐ´ÐµÐ½Ð° Ð¾ÑÐµÐ½ÐºÐ° ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸ ÐµÐ³Ð¾ ÑÐ°Ð±Ð¾ÑÑ. ÐÐ¾Ð»ÑÑÐµÐ½Ð½ÑÐµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ Ð¼Ð¾Ð³ÑÑ Ð¿ÑÐ¸Ð¼ÐµÐ½ÑÑÑÑÑ Ð¿ÑÐ¸ Ð¿Ð¾ÑÑÑÐ¾ÐµÐ½Ð¸Ð¸ ÑÐ¸ÑÑÐµÐ¼ Ð¿Ð¾Ð¸ÑÐºÐ° ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ Ð² Ð´Ð²Ð¾Ð¸ÑÐ½ÑÑ Ð¸ÑÐ¿Ð¾Ð»Ð½ÑÐµÐ¼ÑÑ ÑÐ°Ð¹Ð»Ð°Ñ.
description: The purpose of the study is detecting semantically similar binary code snippets using machine learning methods. The subject of the work is binary code similarity detection methods which use semantic features of code fragments. The research sets the following goals: 1. Analysis of the process of binary code similarity systems functioning and their application in information security. 2. Comparative analysis of modern studies on detecting code clones, highlighting their advantages and disadvantages. 3. Development of method to compare binary code snippets, which allows to make decisions about their similarity. 4. Development of software tool prototype, that implements the proposed method, testing its reliability and evaluating its effectiveness. The paper analyzes the actual methods of binary code clones detection. The work results in proposing method which analyzes and compares code snippets from the point of their structure and functionality. The effectiveness of the method is evaluated in this work. The results obtained can be applied in development of vulnerability search engines for binary executables.