2007/01/01 by Andrew Walenstein, Walenstein, Andrew, Arun Lakhotia +1 · 1 citation
Computer Science · #Advanced Malware Detection Techniques #Information and Cyber Security #Software #Software Engineering Research #Trojans #code clones #code smells #commonality #malicious software #malware #program similarity #software evolution #spyware #viruses #worms
paper · doi:10.4230/dagsemproc.06301.14
openalex publication_date 2007/01/01 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
In software engineering contexts software may be compared for similarity in order to detect duplicate code that indicates poor design, and to reconstruct evolution history. Malicious software, being nothing other than a particular type of software, can also be compared for similarity in order to detect commonalities and evolution history. This paper provides a brief introduction to the issue of measuring similarity between malicious programs, and how evolution is known to occur in the area. It then uses this review to try to draw lines that connect research in software engineering (e.g., on "clone detection") to problems in anti-malware research.