Cross-Platform Software Birthmarking for Real-World Binaries via Intermediate Representation

Abstract

Software birthmarking detects plagiarism through characteristic program features, yet cross-platform resilience remains under-evaluated. This paper proposes a unified birthmarking approach for real-world binaries by lifting disparate formats into a common intermediate representation via Ghidra P-code. Experiments across diverse platforms and languages demonstrate exceptional consistency across CPU architectures ($r=0.9846$), independent of ISA (Instruction Set Architecture) specific details. The study also identifies a ``dilution effect'' in Windows binaries, in which the proliferation of library-derived functions degrades similarity scores. Despite this noise, the Simpson index demonstrates superior discriminative power. These findings clarify the practical capabilities and essential requirements for robust cross-platform birthmarking.