NDLI: A Static Birthmark for MS Windows Applications Using Import Address Table

Content Provider	IEEE Xplore Digital Library
Author	JongCheon Choi YongMan Han Seong-je Cho HaeYoung Yoo Jinwoon Woo Minkyu Park Youngsang Song Chung, L.
Copyright Year	2013
Description	Author affiliation: Dept. of Comput. Eng., Konkuk Univ., Chungju, South Korea (Minkyu Park) \|\| Dept. of Comput. Sci., Dankook Univ., Yongin, South Korea (JongCheon Choi; YongMan Han; Seong-je Cho; HaeYoung Yoo; Jinwoon Woo) \|\| Dept. of Comput. Sci., Univ. of Texas at Dallas, Dallas, TX, USA (Youngsang Song; Chung, L.)
Abstract	A software birthmark is unique and native characteristics of software, and thus can be used to detect the theft of software. We propose a new static software birthmark for programs on Microsoft Windows which have Portable Executable (PE) format. These programs use different Dynamic Link Libraries (DLLs) and Application Program Interfaces (APIs) while they are executing. The number and names of the used DLLs and APIs are unique to each program. The proposed birthmark is based on these numbers and names. This information can be obtained from the Import Address Table (IAT), which is part of the PE file. By inspecting the proposed birthmark, we can identify certain software and detect pirated software. To evaluate the effectiveness of the proposed birthmark, we inspect and compare several applications of different kinds. The experimental results show that the proposed birthmark can identify Windows applications, leading to the prevention of an illegal distribution of copyrighted software.
Starting Page	129
Ending Page	134
File Size	343306
Page Count	6
File Format	PDF
ISBN	9780769549743
DOI	10.1109/IMIS.2013.159
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2013-07-03
Publisher Place	Taiwan
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Software birthmark Java Databases Static birthmark DLL Educational institutions Feature extraction Software Libraries API Data mining Import address table
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A Static Birthmark of Windows Binary Executables Based on Strings

Measuring similarity of windows applications using static and dynamic birthmarks

Mining API mapping for language migration

A Survey of Feature Extraction Techniques to Detect the Theft of Windows Applications

A Dataset for API Usage

Automatic extraction of table metadata from digital documents

Adding Examples into Java Documents

Quality Metrics for Object-Based Data Mining Applications

A Combined Static and Dynamic Software Birthmark Based on Component Dependence Graph

A Static Birthmark for MS Windows Applications Using Import Address Table

Similar Documents

A Static Birthmark of Windows Binary Executables Based on Strings

Measuring similarity of windows applications using static and dynamic birthmarks

Mining API mapping for language migration

A Survey of Feature Extraction Techniques to Detect the Theft of Windows Applications

A Dataset for API Usage

Automatic extraction of table metadata from digital documents

Adding Examples into Java Documents

Quality Metrics for Object-Based Data Mining Applications

A Combined Static and Dynamic Software Birthmark Based on Component Dependence Graph

A Static Birthmark for MS Windows Applications Using Import Address Table