Detecting similarities in Java sources from bytecodes

Claim 3

The method of claim 1 wherein at least one parameter token includes a index into a constant pool associated with the disassembled bytecode file, and at least one non-parameter token includes a opcode instruction from the disassembled bytecode file.

Claim 6

The method of claim 3 wherein the positionally encoding each disassembled bytecode file operation computes a first offset for the index linked with the constant pool and a second offset for the another one index linked with the local variable pool.

Claim 7

The method of claim 4 wherein the first offset is a number of program code lines in the disassembled bytecode file.

Claim 8

The method of claim 3 further comprising: identifying a source program from which at least one of the particular ones of the bytecode files originates.

Claim 9

The method of claim 6 wherein the comparison is made by executing a combination of Siff, Dup and Diff detection tools.

Claim 10

The method of claim 6 wherein the source program is a Java applet.

Claim 11

A machine-readable medium having stored thereon a plurality of instructions, the plurality of instructions including instructions that, when executed by a machine, cause the machine to perform a method of detecting similarities between a plurality of bytecode files by disassembling each bytecode file of the plurality of bytecode files to form a plurality of disassembled bytecode files, applying a lexical analyzer to at least one disassembled bytecode file, positionally encoding each disassembled bytecode file of the plurality of disassembled bytecode files, and detecting similarities between particular ones of the bytecode files as a function of a comparison between the encoded disassembled bytecode files, wherein the positionally encoding is performed in a manner in which like parameters contained within a particular disassembled bytecode file are labeled to identify the like parameters' positional relationships within the particular disassembled bytecode file, and wherein each disassembled bytecode file includes a plurality of indexes, at least one index of the plurality of indexes being linked with a constant pool, and at least another one index of the plurality of indexes being linked with a local variable table.

Claim 12

A machine-readable medium having stored thereon a plurality of instructions, the plurality of instructions including instructions that, when executed by a machine, cause the machine to perform a method of detecting similarities between a plurality of bytecode files by disassembling each bytecode file of the plurality of bytecode files to form a plurality of disassembled bytecode files, applying a lexical analyzer to at least one disassembled bytecode file, positionally encoding each disassembled bytecode file of the plurality of disassembled bytecode files, and detecting similarities between particular ones of the bytecode files as a function of a comparison between the encoded disassembled bytecode files, wherein the positionally encoding is performed in a manner in which like parameters contained within a particular disassembled bytecode file are labeled to identify the like parameters' positional relationships within the particular disassembled bytecode file, and wherein each disassembled bytecode file includes a plurality of indexes, at least one index of the plurality of indexes being linked with a constant pool, and at least another one index of the plurality of indexes being linked with a local variable table.

Claim 13

The machine-readable medium of claim 9 wherein the positionally encoding each disassembled bytecode file operation computes a first offset for the index linked with the constant pool and a second offset for the another one index linked with the local variable pool.

Claim 16

The apparatus of claim 11 wherein the means for positionally encoding performs the encoding in a manner in which like parameters contained within a particular disassembled bytecode file are labeled to identify the like parameters' positional relationships within the particular disassembled bytecode file.

Claim 17

The apparatus of claim 12 further comprising: means for recording the particular ones of the binary code files for which similarities are detected; and means for identifying a source program from which at least one of the particular ones of the binary code files originates.

Claim 18

The apparatus of claim 11 wherein the means for detecting similarities employs at least one similarity detection tool.

Claim 19

The apparatus of claim 14 wherein the similarity detection tool is a similarity detection tool selected from the group consisting of Siff, Dup and Diff.