Bin2Vec通过多视角分析代码相似性,让抄袭检测既准确又可解释。
Bin2Vec: Interpretable and Auditable Multi-View Binary Analysis for Code Plagiarism Detection
- 融合静态特征与运行时行为,生成可解释的多视图表示
- 在PuTTY和7-Zip测试中实现高精度相似性判断
- 适合安全审计、软件溯源等需要透明决策的场景
我们提出Bin2Vec,一种用于代码抄袭检测的新型框架,能以清晰可解释的方式比较软件程序。该框架不局限于单一信息类型,而是结合程序的静态特征(如内置函数、导入导出)与动态行为(如指令序列、内存使用),生成多视角表示。每个视图可通过直观图表独立分析,并整合为整体相似性评分。Bin2Vec作为二进制表示与机器学习之间的桥梁,生成可高效处理的特征向量。我们在多个版本的Windows程序PuTTY和7-Zip上进行了测试,结果表明其能生成最优且可视化友好的表示:PuTTY版本表现出更复杂的运行行为与内存活动,而7-Zip版本则呈现更强的性能相关模式。整体上,Bin2Vec提供可靠且人类可理解的判断。由于模块化设计,该方法适用于审计、验证软件来源或在网络安全与逆向工程中快速筛查大量程序。
原文摘要 · Abstract (English)
We introduce Bin2Vec, a new framework that helps compare software programs in a clear and explainable way. Instead of focusing only on one type of information, Bin2Vec combines what a program looks like (its built-in functions, imports, and exports) with how it behaves when it runs (its instructions and memory usage). This gives a more complete picture when deciding whether two programs are similar or not. Bin2Vec represents these different types of information as views that can be inspected separately using easy-to-read charts, and then brings them together into an overall similarity score. Bin2Vec acts as a bridge between binary representations and machine learning techniques by generating feature representations that can be efficiently processed by machine-learning models. We tested Bin2Vec on multiple versions of two well-known Windows programs, PuTTY and 7-Zip. The primary results strongly confirmed that our method compute an optimal and visualization-friendly representation of the analyzed software. For example, PuTTY versions showed more complex behavior and memory activity, while 7-Zip versions focused more on performance-related patterns. Overall, Bin2Vec provides decisions that are both reliable and explainable to humans. Because it is modular and easy to extend, it can be applied to tasks like auditing, verifying software origins, or quickly screening large numbers of programs in cybersecurity and reverse-engineering work.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。