Birthmarking
Detecting Software Theft with API Call-Sequence Sets
Universität des Saarlandes – Informatik
Informatik Campus des Saarlandes
Campus E9 1 (CISPA)
66123 Saarbrücken
E-mail: zeller @ cs.uni-saarland.de
Telefon: +49 681 302-70970
The Birthmarking project at Software Engineering Chair, Saarland University investigates a birthmark based on API call sequence sets for Java programs.
Paper
The paper A Dynamic Birthmark for Java (PDF) was accepted for presentation at Automated Software Engineering 2007.
Download
Download the API Birthmark tool here, and find documentation here.
Credibility
Comparison of API birthmarks between six different PNG readers.The table shows the pairwise similarity of the birthmarks.
| Imagero | JAI | JIMI | JIU | Sixlegs | Visualtek | |
| Imagero | 0.99 | 0.03 | 0.08 | 0.03 | 0.01 | 0.01 |
| JAI | 0.03 | 0.99 | 0.02 | 0.02 | 0.01 | 0.00 |
| JIMI | 0.08 | 0.02 | 1.00 | 0.25 | 0.00 | 0.01 |
| JIU | 0.03 | 0.02 | 0.25 | 1.00 | 0.09 | 0.00 |
| Sixlegs | 0.01 | 0.01 | 0.00 | 0.09 | 1.00 | 0.01 |
| Visualtek | 0.01 | 0.00 | 0.01 | 0.00 | 0.01 | 1.00 |
The birthmarks were obtained using PNG Suite as input.
PNG readers that were used:
- Imagero Reader
- JAI Java Advanced Imaging
- JIMI Java Image Management Interface
- JIU The Java Imaging Utilities An image processing library
- SIXLEGS PNG Software
- Visualtek (part of Genographer)
| Aelfred | Crimson | OracleV2 | Piccolo | Xerces | XP | |
| Aelfred | 1.00 | 0.13 | 0.10 | 0.10 | 0.04 | 0.24 |
| Crimson | 0.13 | 1.00 | 0.14 | 0.00 | 0.02 | 0.15 |
| OracleV2 | 0.10 | 0.14 | 1.00 | 0.00 | 0.03 | 0.00 |
| Piccolo | 0.10 | 0.00 | 0.00 | 1.00 | 0.01 | 0.18 |
| Xerces | 0.04 | 0.02 | 0.03 | 0.01 | 1.00 | 0.00 |
| XP | 0.24 | 0.15 | 0.00 | 0.18 | 0.00 | 1.00 |
The birthmarks were obtained using the SAXBench
XML parsers that were used:
- Aelfred
- Crimson
- Oracle XML Parser for Java v2
- Piccolo XML Parser for Java
- Xerces Java Parser
- XP - an XML Parser in Java
Resilience
Resilience of Birthmark against obfuscations applied by Zelix KlassMaster and Sandmark.The values in give the similarity between the birthmark of an obfuscated and the birthmark of an unmodified version.
| Zelix | Sandmark | |||||||||
| Block Marker | Boolean Splitter | Class Splitter | False Refactor | Field Assign | Method Merger | Rename Registers | Static Method Bodies | All techniques successively | ||
| Imagero | 1.00 | 0.99 | 0.99 | 1.00 | 0.99 | 0.99 | 0.99 | 0.99 | 1.00 | 0.99 |
| JAI | 0.99 | 0.99 | 1.00 | 0.99 | 1.00 | 0.99 | 0.99 | 0.99 | 1.00 | 0.99 |
| JIMI | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 |
| JIU | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 |
| Sixlegs | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 |
| Visualtek | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 |
| Aelfred | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 |
| Oracle V2 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 |
| Piccolo | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 |
| Xerces | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 |
| Crimson | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 |
| XP | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 | 1.00 |
People
Impressum ● Datenschutzerklärung
<webmaster@st.cs.uni-saarland.de> · http://www.st.cs.uni-saarland.de/birthmarking/ · Stand: 2018-04-05 13:40