Alternative Builds dataset for Levels of Binary Equivalence paper
收藏资源简介:
The availability of multiple binaries built from the same sources creates new challenges and opportunities, and raises questions such as: “Does build A confirm the integrity of build B?” or “Can build A reveal a compromised build B?”. We introduce levels of equivalence, inspired by clone detection types, and demonstrate the value of these new levels through several experiments. For this purpose, we construct a dataset consisting of Java binaries (jar files) built from the same sources independently by different providers, resulting in 14,156 pairs of binaries in total.
由同一源代码编译得到的多份二进制文件的存在,既带来了新的挑战与机遇,也引发了诸如"构建产物A能否验证构建产物B的完整性?"或"构建产物A能否揭示存在篡改的构建产物B?"这类问题。受克隆检测类型的启发,我们提出了等价性层级的概念,并通过多组实验验证了这些新等价性层级的价值。为此,我们构建了一个数据集,该数据集包含由不同构建方基于同一源代码独立编译得到的Java二进制文件(jar文件),总计形成14156组二进制文件对。



