RT Journal Article
T1 Malware similarity and a new fuzzy hash: Compound Code Block Hash (CCBHash)
A1 Onieva-González, José Antonio
A1 Pérez-Jiménez, Pablo
A1 López-Muñoz, Francisco Javier
K1 Aplicaciones informáticas
K1 Virus informáticos
K1 Seguridad informática
AB In the last few years, malware analysis has become increasingly important due to the rise of sophisticated cyberattacks. One of the objectives of this cybersecurity branch is to find similarities between different files or functions used by malware programmers, thus allowing malware detection, classification and even attribution in a timely manner. In this article we survey the state of the art in this area, reviewing the different techniques that can be applied to the field, with the objective of studying similarity, and therefore detecting, classifying and attributing malware samples. We have developed a fuzzy hash capable of characterizing malware by generating an easily comparable and storable signature of its functions. Since our goal is to detect these similarities in huge amounts of data within a reasonable time-frame, the size of the hash must be limited while retaining as much information as possible.
PB Elsevier
YR 2024
FD 2024
LK https://hdl.handle.net/10630/31151
UL https://hdl.handle.net/10630/31151
LA eng
NO Jose A. Onieva, Pablo Pérez Jiménez, Javier López, Malware similarity and a new fuzzy hash:  Compound Code Block Hash (CCBHash), Computers & Security, Volume 142, 2024, 103856, ISSN 0167-4048, https://doi.org/10.1016/j.cose.2024.103856.
NO Funding for open access charge: Universidad de Málaga / CBUA
DS RIUMA. Repositorio Institucional de la Universidad de Málaga
RD 20 ene 2026