Fuzzy hashing

Fuzzy hashing, also known as similarity hashing,^[1] is a technique for detecting data that is similar, but not exactly the same, as other data. This is in contrast to cryptographic hash functions, which are designed to have significantly different hashes for even minor differences. Fuzzy hashing has been used to identify malware^[2]^[3] and has potential for other applications, like data loss prevention and detecting multiple versions of code.^[4]^[5]

^ Cite error: The named reference NIST.SP.800-168 was invoked but never defined (see the help page).
^ Cite error: The named reference Beyond Precision and Recall: Understanding Uses (and Misuses) of Similarity Hashes in Binary Analysis was invoked but never defined (see the help page).
^ Cite error: The named reference Forensic Malware Analysis: The Value of Fuzzy Hashing Algorithms in Identifying Similarities was invoked but never defined (see the help page).
^ Cite error: The named reference ssdeep was invoked but never defined (see the help page).
^ Cite error: The named reference tlsh was invoked but never defined (see the help page).

[NIST.SP.800-168-1] Cite error: The named reference NIST.SP.800-168 was invoked but never defined (see the help page).

[Beyond_Precision_and_Recall:_Understanding_Uses_(and_Misuses)_of_Similarity_Hashes_in_Binary_Analysis-2] Cite error: The named reference Beyond Precision and Recall: Understanding Uses (and Misuses) of Similarity Hashes in Binary Analysis was invoked but never defined (see the help page).

[Forensic_Malware_Analysis:_The_Value_of_Fuzzy_Hashing_Algorithms_in_Identifying_Similarities-3] Cite error: The named reference Forensic Malware Analysis: The Value of Fuzzy Hashing Algorithms in Identifying Similarities was invoked but never defined (see the help page).

[ssdeep-4] Cite error: The named reference ssdeep was invoked but never defined (see the help page).

[tlsh-5] Cite error: The named reference tlsh was invoked but never defined (see the help page).

[1]

[2]

[3]

[4]

[5]