Beyond Precision and Recall: Understanding Uses (and Misuses) of Similarity Hashes in Binary Analysis

No abstract is available for this paper.

• Publication year

  2018

• Venue

  Conference on Data and Application Security and Privacy

• Publication date

  2018-03-13

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1145/3176258.3176306
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Bytewise Approximate Matching: The Good, The Bad, and The Unknown

  2016cited by this paper
• AndroSimilar: Robust signature for detecting variants of Android malware

  2015cited by this paper
• Variant: a malware similarity testing framework

  2015influential reference
• Needles in a Haystack: Mining Information from Public Dynamic Analysis Sandboxes for Malware Intelligence

  2015cited by this paper
• How Cuckoo Filter Can Improve Existing Approximate Matching Techniques

  2015cited by this paper
• Experimental study of fuzzy hashing in malware clustering analysis

  2015cited by this paper
• A Large-Scale Analysis of the Security of Embedded Firmwares

  2014cited by this paper
• Mining Malware to Detect Variants

  2014influential reference
• Approximate Matching: Definition and Terminology

  2014cited by this paper
• Automated evaluation of approximate matching algorithms on real data

  2014influential reference
• FRASH: A framework to test algorithms of similarity hashing

  2013cited by this paper
• TLSH -- A Locality Sensitive Hash

  2013influential reference
• SigMal: a static signal processing based malware triage

  2013cited by this paper
• Results of SEI Line-Funded Exploratory New Starts Projects

  2012influential reference
• Similarity Preserving Hashing: Eligible Properties and a New Algorithm MRSH-v2

  2012cited by this paper
• BitShred: feature hashing malware for scalable triage and semantic analysis

  2011cited by this paper
• Supervised learning for provenance-similarity of binaries

  2011cited by this paper
• An evaluation of forensic similarity hashes

  2011influential reference
• Data Fingerprinting with Similarity Digests

  2010cited by this paper
• Bringing science to digital forensics with standardized forensic corpora

  2009cited by this paper
• peHash: A Novel Approach to Fast Malware Clustering

  2009cited by this paper
• Multi-resolution similarity hashing

  2007cited by this paper
• Identifying almost identical files using context triggered piecewise hashing

  2006cited by this paper
• An Open Digest-based Technique for Spam Detection

  2004influential reference
• A low-bandwidth network file system

  2001cited by this paper
• Similarity Search in High Dimensions via Hashing

  1999cited by this paper

• A Graph Similarity Calculation Algorithm and Its Application for Comparing Binary Executable Files

  2025cites this paper
• If at first you don't succeed, trie, trie again: Correcting TLSH scalability claims for large-dataset malware forensics

  2025cites this paper
• Bytewise approximate matching: Evaluating common scenarios for executable files

  2025cites this paper
• Text Similarity Detection in Agglutinative Languages: A Case Study of Kazakh Using Hybrid N-Gram and Semantic Models

  2025cites this paper
• Concealing targeted attacks on the TLSH similarity digest scheme

  2025cites this paper
• Using approximate matching and machine learning to uncover malicious activity in logs

  2025cites this paper
• On the Limitations of Fuzzy Hashing for Malware Similarity: An Analysis of Vulnerable Code Detection in Malware

  2025cites this paper
• Family Ties: A Close Look at the Influence of Static Features on the Precision of Malware Family Clustering

  2025cites this paper
• APT-ClaritySet: A Large-Scale, High-Fidelity Labeled Dataset for APT Malware with Alias Normalization and Graph-Based Deduplication

  2025cites this paper
• Enhancing Binary Security Analysis Through Pre-Trained Semantic and Structural Feature Matching

  2025cites this paper
• The Polymorphism Maze: Understanding Diversities and Similarities in Malware Families

  2025cites this paper
• Targeted Attacks Against the TLSH Similarity Digest Scheme

  2025influential citation
• ProwseBox: A Framework for the Analysis of the Web at Scale

  2025cites this paper
• A Scalable, Effective and Simple Vulnerability Tracking Approach for Heterogeneous SAST Setups Based on Scope+Offset

  2025cites this paper
• A temporal analysis and evaluation of fuzzy hashing algorithms for Android malware analysis

  2024cites this paper
• On the Robustness of Malware Detectors to Adversarial Samples

  2024cites this paper
• A Method to Quantitative Compare Obfuscating Ttransformations

  2024cites this paper
• Synthetic Datasets for Program Similarity Research

  2024cites this paper
• Soft precision and recall

  2023cites this paper
• Nation-State Threat Actor Attribution Using Fuzzy Hashing

  2023cites this paper
• An Evaluation of Malware Triage Similarity Hashes

  2023cites this paper
• AIHGAT: A novel method of malware detection and homology analysis using assembly instruction heterogeneous graph

  2023cites this paper
• Similarity Regression Of Functions In Different Compiled Forms With Neural Attentions On Dual Control-Flow Graphs

  2023cites this paper
• How Machine Learning Is Solving the Binary Function Similarity Problem

  2022cites this paper
• In the Land of MMUs: Multiarchitecture OS-Agnostic Virtual Memory Forensics

  2022cites this paper
• A Comprehensive Analysis of Today’s Malware and its Distribution Network: Common Adversary Strategies and Implications

  2022cites this paper
• What the Fork? Finding and Analyzing Malware in GitHub Forks

  2022cites this paper
• No Spring Chicken: Quantifying the Lifespan of Exploits in IoT Malware Using Static and Dynamic Analysis

  2022cites this paper
• A Deep Dive into VirusTotal: Characterizing and Clustering a Massive File Feed

  2022cites this paper
• Understanding uses and misuses of similarity hashing functions for malware detection and family clustering in actual scenarios

  2021influential citation
• Evaluation of Network Traffic Analysis Using Approximate Matching Algorithms

  2021cites this paper
• Pre-processing memory dumps to improve similarity score of Windows modules

  2021cites this paper
• Using improved context-based code description for robust algorithmic binding to changing code

  2021cites this paper
• Scalable malware detection system using big data and distributed machine learning approach

  2021cites this paper
• Scalable Malware Clustering using Multi-Stage Tree Parallelization

  2020cites this paper
• Clustering IoT Malware based on Binary Similarity

  2020cites this paper
• Trex: Learning Execution Semantics from Micro-Traces for Binary Similarity

  2020cites this paper
• HAC-T and Fast Search for Similarity in Security

  2020cites this paper
• Towards exact and inexact approximate matching of executable binaries

  2019influential citation
• On efficiency of artifact lookup strategies in digital forensics

  2019cites this paper
• Clustering IoT Malware Samples based on Binary Similarity

  2019cites this paper
• FISHDBC: Flexible, Incremental, Scalable, Hierarchical Density-Based Clustering for Arbitrary Data and Distance

  2019cites this paper
• A Survey of Binary Code Similarity

  2019cites this paper
• Improving file-level fuzzy hashes for malware variant classification

  2019cites this paper
• Backdoor detection systems for embedded devices

  2018cites this paper
• Quantifying the Effectiveness of Software Diversity using Near-Duplicate Detection Algorithms

  2018cites this paper
• Digital Commons @ New Haven Digital Commons @ New Haven

  year unknowncites this paper