The Research Of Software Birthmark Based On System Call And Program Data Dependence

With the rapid development of technology and open source projects,software piracy becomes more threatened to software industry and brings huge economic losses to many software manufactures.In the grim situation,awareness of the protection of intellectual property rights to the software are strongly increasing and demand for preventing software piracy has become increasingly urgent.At the same time,copycats continue to develop new techniques to hide the plagiarism,which greatly increases the difficulty of preventing software piracy.It is extremely urgent to develop an accurate and reliable method to protect software intellectual property.Technologies used to protect software intellectual property currently includes software encryption,software watermark,code obfuscation and software birthmark.Among these technologies,software birthmark has better detection performance and best prospects of plagiarism protection.A lot of software birthmark have been proposed so far.Such as Java birthmark,WPP birthmark,k-gram based birthmark,API based birthmark,system call based birthmark.By comprehensively analyzing various software birthmark from the aspects of accuracy,immunity and scope of application,system call based birthmark has the best performance.However,system call based birthmark still has some shortcomings,such as,it can't be used to detect algorithm plagiarism and it tends to high rate of false positives when detecting software with similar behavior.In order to solve the above problems,we proposed a software birthmark based on system call and program data dependence.In this paper,system call and program data dependence based software birthmark is proposed,which combines system call dependence graph and program data dependence graph and improves the system call based software birthmark.The definitions of program data,program data dependence and program data dependence graph are given.A system is implemented to extract the birthmark and a subgraph isomorphism algorithm is improved to compare the birthmark.At last,experiments prove that system call and program data dependence based software birthmark is able to detect algorithm piracy,with high reliability,and also has a higher resistance to the mainstream obfuscation tool.