Please use this identifier to cite or link to this item:
https://dair.nps.edu/handle/123456789/4389
Full metadata record
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Bruce Allen | - |
dc.date.accessioned | 2021-05-18T19:58:18Z | - |
dc.date.available | 2021-05-18T19:58:18Z | - |
dc.date.issued | 2021-05-10 | - |
dc.identifier.citation | Published--Unlimited Distribution | en_US |
dc.identifier.uri | https://dair.nps.edu/handle/123456789/4389 | - |
dc.description | Acquisition Management / Defense Acquisition Community Contributor | en_US |
dc.description.abstract | Executable programs run on computers and digital devices. These programs are pre-installed by the device vendor or are downloaded or copied from a storage media. It is useful to study file similarity between executable files to verify valid updates, identify potential copyright infringement, identify malware, and detect other abuse of purchased software. An alternative to relying on simplistic methods of file comparison, such as comparing their hash codes to see if they are identical, is to identify the “texture” of files and then assess its similarity between files. To test this idea, we experimented with a sample of 23 Windows executable file families and 1,386 files. We identify points of similarity between files by comparing sections of data in their standard deviations, means, modes, mode counts, and entropies. When vectors are sufficiently similar, we calculate the offsets (shifts) between the sections to get them to align. Using analysis on these shifts, we can measure file similarity efficiently. By plotting similarity vs. time, we track the progression of similarity between files. | en_US |
dc.description.sponsorship | Acquisition Research Program | en_US |
dc.language.iso | en_US | en_US |
dc.publisher | Acquisition Research Program | en_US |
dc.relation.ispartofseries | Acquisition Management;SYM-AM-21-082 | - |
dc.subject | Texture Vector Analysis | en_US |
dc.subject | Computer | en_US |
dc.subject | Device File | en_US |
dc.title | Using Texture Vector Analysis to Measure Computer and Device File Similarity | en_US |
dc.type | Book chapter | en_US |
Appears in Collections: | Annual Acquisition Research Symposium Proceedings & Presentations |
Files in This Item:
File | Description | Size | Format | |
---|---|---|---|---|
SYM-AM-21-082.pdf | 933.83 kB | Adobe PDF | View/Open |
Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.