Signature generation device, signature generation method, recording medium storing signature generation program, and software determination system
AssigneeNEC Corporation
InventorTatsuya ITO
Life of this patent
Estimating the term…
Abstract
Provided is a signature generation device, etc., generating signature information with high accuracy. The signature generation device calculates hash values for at least a partial area in individual files; calculates a similarity degree between the calculated hash values and classifies the plurality of files into groups based on the calculated degree; specifies common strings among, at least, some of the files in strings included in files of a group, the strings being symbol strings or bit strings; and generates signature information being a criterion for determining whether or not at least a part of the common string in the specified common strings is included.
Claims10
A signature generation device comprising:
- a hash calculator configured to calculate hash values for at least a partial area in individual files;
- a classifier configured to calculate a similarity degree between the hash values calculated by the hash calculator and classify the plurality of files into groups based on the calculated degree;
- a specifier configured to specify common strings among, at least, some of the files in strings included in files of a group, the strings being symbol strings or bit strings;
- and
- a signature generator configured to generate signature information being a criterion for determining whether or not at least a part of the common string in the specified common strings is included.
A signature generation method by an information processing device comprising:
- calculating hash values for at least a partial area in individual files;
- calculating a similarity degree between the calculated hash values and classifying the plurality of files into groups based on the calculated degree;
- specifying common strings among, at least, some of the files in strings included in files of a group, the strings being symbol strings or bit strings;
- and
- generating signature information being a criterion for determining whether or not at least a part of the common string in the specified common strings is included.
A non-transitory recoding medium storing a signature generation program, the program making a computer achieve:
- a hash calculation function configured to calculate hash values for at least a partial area in individual files;
- a classification function configured to calculate a similarity degree between the hash values calculated by the hash calculation function and classify the plurality of files into groups based on the calculated degree;
- a specification function configured to specify common strings among, at least, some of the files in strings included in files of a group, the strings being symbol strings or bit strings;
- and
- a signature generation function configured to generate signature information being a criterion for determining whether or not at least a part of the common string in the specified common strings is included.
Dependencies are inferred from the claim text.