Welcome Guest.   Make a donation to an author on the site September 16, 2014, 06:29:22 AM  *

Please login or register.
Or did you miss your validation email?


Login with username and password (forgot your password?)
Why not become a lifetime supporting member of the site with a one-time donation of any amount? Your donation entitles you to a ton of additional benefits, including access to exclusive discounts and downloads, the ability to enter monthly free software drawings, and a single non-expiring license key for all of our programs.


You must sign up here before you can post and access some areas of the site. Registration is totally free and confidential.
 
Read the Practical Guide to DonationCoder.com Forum Search Features
   
   Forum Home   Thread Marks Chat! Downloads Search Login Register  
Pages: [1]   Go Down
  Reply  |  New Topic  |  Print  
Author Topic: Fuzzy Hashing with ssdeep  (Read 1523 times)
Mark0
Charter Honorary Member
***
Posts: 593


see users location on a map View Profile WWW Give some DonationCredits to this forum member
« on: April 27, 2012, 01:18:10 PM »

Hi!
Long time no post! smiley

So, here an humble try at contributing something interesting.
I discovered ssdeep just some days ago, and already found it very useful in a couple of different situations.

Quoting from the site intro:
Quote
ssdeep is a program for computing context triggered piecewise hashes (CTPH). Also called fuzzy hashes, CTPH can match inputs that have homologies. Such inputs have sequences of identical bytes in the same order, although bytes in between these sequences may be different in both content and length.

So, point it a directory with a lot of files in, of any kind, and it can produce a list of related files: various versions of the same executable, all the documents of certain kind, and so on.
It also include a library with a few exported functions to easily take advantage of its features from other applications.
Logged

skwire
Charter Member
***
Posts: 4,066



Another Coding Snack request? Om nom nom...

see users location on a map View Profile WWW Give some DonationCredits to this forum member
« Reply #1 on: April 27, 2012, 01:30:50 PM »

Rather interesting.   thumbs up
Logged

Mark0
Charter Honorary Member
***
Posts: 593


see users location on a map View Profile WWW Give some DonationCredits to this forum member
« Reply #2 on: April 27, 2012, 02:24:29 PM »

A paper on the topic by the tool's author:

Identifying Almost Identical Files Using Context Triggered Piecewise Hashing (Jesse Kornblum, 2006)
Logged

Pages: [1]   Go Up
  Reply  |  New Topic  |  Print  
 
Jump to:  
   Forum Home   Thread Marks Chat! Downloads Search Login Register  

DonationCoder.com | About Us
DonationCoder.com Forum | Powered by SMF
[ Page time: 0.033s | Server load: 0.11 ]