Izrada algoritma za izračun jedinstvenog otiska autora nekog programskog koda

undergraduate thesis

• Title (english): Creating an algorithm for calculating the unique footprint of an author of a program code
• Author: Robert Benić
• Mentor: Stjepan Groš (mentor)
• Committee member: Stjepan Groš (predsjednik povjerenstva)
• Committee member: Ivona Brajdić (član povjerenstva)
• Committee member: Karlo Slovenec (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2020-07-07, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Ovaj završni rad iznosi nekoliko koncepata na osnovu kojih je moguće razlikovati stilove autora programskih kôdova u binarnom (objektnom ili izvršnom) formatu i na tim konceptima izgrađuje programsko rješenje.

Algoritam je vođen idejom da budući da programer piše izvorni kôd, a ne binarni kôd, potrebno je procijeniti strukturu izvornog kôda što je bolje moguće na osnovu binarnog kôda. Elementi na kojima se algoritam zasniva su kratki odsječci koji se dobiju prevođenjem svake naredbe iz izvornog kôda.

Od elemenata prikupljenih iz programa nekog autora se sastavlja otisak koji treba biti jedinstven za njegov vlastiti stil. Za izbor elemenata se koriste dvije različite metode: metoda n-grama i metoda rječnika. Metoda n-grama je prikladna u slučajevima u kojima je malo dostupnih podataka o korištenom programskom jeziku i prevoditelju, a metoda rječnika je prikladna u slučajevima u kojima je dostupno više podataka.

Abstract (english)

This final paper presents several concepts based on which it is possible to distinguish between styles of program code authors in a binary (object or executable) format and builds a software solution upon these concepts.

The algorithm is guided by the idea that because a programmer writes source code rather than binary code, one should approximate the structure of the source code as best as possible based on the binary code. The elements on which the algorithm is based are short snippets obtained by compiling each command from the source code.

A fingerprint is constructed from elements collected from a certain author's programs, which is supposed to be unique for the author's own style. Two different methods are used for selection of elements: the n-gram method and the dictionary method. The n-gram method is suitable in cases where there is little available data about the programming language and the compiler that were used, and the dictionary method is suitable in cases where more data is available.

• Keywords: računalna forenzika; zloćudni programi; binarni kôd; stil programiranja; otisak; identifikacija; atribucija; analiza n-grama; analiza rječnikom
• Keywords (english): computer forensics; malware; binary code; programmer style; fingerprint; identification; attribution; n-gram analysis; dictionary analysis
• Language: croatian
• URN:NBN: urn:nbn:hr:168:290855
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-14 08:28:00