Abstract:Source code similarity detection has various applications in code plagiarism detection and software intellectual property protection. In computer programming teaching, students may convert the source code written in one programming language into another language for their code assignment submission. Existing similarity measures of source code written in the same language are not applicable for the cross-language code similarity detection because of syntactic differences among different programming languages. Meanwhile, existing cross-language source similarity detection approaches are susceptible to complex code obfuscation techniques, such as replacing equivalent control structure and adding redundant statements. To solve this problem, we propose a cross-language code similarity detection (CLCSD) approach based on code flowcharts. In general, two source code fragments written in different programming languages are transformed into standardized code flowcharts (SCFC), and their similarity is obtained by measuring their corresponding SCFC. More specifically, we first introduce the standardized code flowchart (SCFC) model to be the uniform flowcharts representation of source code written in different languages. SCFC is language-independent, and therefore, it can be used as the intermediate structure for source code similarity detection. Meanwhile, transformation techniques are given to transform source code written in a specific programming language into an SCFC. Second, we propose the SCFC-SPGK algorithm based on the shortest path graph kernel to measure the similarity between two SCFCs. Thus, the similarity between two pieces of source code in different programming languages is given by the similarity between SCFCs. Experimental results show that compared with existing approaches, CLCSD has higher accuracy in cross-language source code similarity detection. Furthermore, CLCSD cannot only handle common source code obfuscation techniques used by students in computer programming teaching but also obtain nearly 90% accuracy in dealing with some complex obfuscation techniques.

Information Flow Analysis in Source Code Based on SSA Intermediate Representation

Adaptive Call-Site Sensitive Control Flow Integrity

Hardware-Assisted Control-Flow Integrity Enhancement for IoT Devices

A Multi-Compositional Enforcement on Information Flow Security

SCFI: Efficient forward fine-grained control flow integrity based on coarse-grained ISA extensions

A Practical Covert Channel Identification Approach in Source Code Based on Directed Information Flow Graph

Key Technologies and Improvement of Identifying Covert Channels in Source Code

Research on OVSF code assignment algorithm

Output-sensitive Information flow analysis

An efficient control flow security analysis approach for binary executables

An ASIP Compiler Design and Implementation

Probabilistic Alias Analysis for Parallel Programming in SSA Forms

SSI Properties Revisited

Unveiling the Power of Intermediate Representations for Static Analysis: A Survey

A Proposed Model for Source Code Reuse Detection in Computer Programs

A Control Flow Diagram Generation Algorithm Based on Clang Static Analyzer

Static analysis by abstract interpretation of embedded critical software

Using Information Flow to estimate interference between developers same method contributions

Augmented Symbolic Execution for Information Flow in Hardware Designs

A Control Flow based Static Analysis of GRAFCET using Abstract Interpretation

Flowchart-Based Cross-Language Source Code Similarity Detection