Method and system for matching unknown software component to known software component

摘要

A computer system or method identifies components. A component fingerprint storage is configured to memorize known fingerprints of known components. The term “component” used herein is defined to be a specific version of pre-existing executable software, or a reusable pre-existing self-contained software code building block which is not a complete stand-alone finished product ready for use and which is binary or source code. A fingerprint is generated for a normalized unknown component and fingerprints are generated for all normalized components included in the unknown component. It is determined whether any of the fingerprints generated for the normalized unknown component and for the normalized components included in the unknown component match any of the known fingerprints of known components.

主权项

1. A computer system that identifies components, comprising:
a component fingerprint storage configured to memorize known fingerprints of known components; and a processor cooperatively operable with the component fingerprint storage, and configured to facilitate: determining all components included within an unknown component; generating fingerprints for all components determined to be included in the unknown component; determining whether any of the fingerprints generated for the components included in the unknown component match any of the known fingerprints of known components; determining whether the unknown component matches any of the known components based on matching of the known fingerprints of the components included in the unknown component; and preparing a matching confidence value based on matching of the unknown component and all of the components determined to be included in the unknown component to any of the known fingerprints, wherein the matching confidence value expresses a level of confidence that the unknown component and a known component which is associated with a matched one of the known fingerprints are the same.