2026-07-21T19:24:37Z https://drops.dagstuhl.de/oai

oai:drops-oai.dagstuhl.de:964 2024-03-06T11:07:00Z ddc:004 open_access

The Software Similarity Problem in Malware Analysis Walenstein, Andrew Lakhotia, Arun Software software evolution commonality program similarity code clones code smells malicious software malware worms Trojans viruses spyware In software engineering contexts software may be compared for similarity in order to detect duplicate code that indicates poor design, and to reconstruct evolution history. Malicious software, being nothing other than a particular type of software, can also be compared for similarity in order to detect commonalities and evolution history. This paper provides a brief introduction to the issue of measuring similarity between malicious programs, and how evolution is known to occur in the area. It then uses this review to try to draw lines that connect research in software engineering (e.g., on "clone detection") to problems in anti-malware research. Schloss Dagstuhl – Leibniz-Zentrum für Informatik Andrew Walenstein and Arun Lakhotia 2007 Is Part Of Dagstuhl Seminar Proceedings, Volume 6301, Duplication, Redundancy, and Similarity in Software (2007) InProceedings Text doc-type:ResearchArticle publishedVersion application/pdf doi:10.4230/DagSemProc.06301.14 urn:nbn:de:0030-drops-9640 https://drops.dagstuhl.de/entities/document/10.4230/DagSemProc.06301.14 eng https://creativecommons.org/licenses/by/4.0/legalcode