Lempel-Ziv Jaccard Distance, an Effective Alternative to Ssdeep and Sdhash

Edward Raff, Charles K. Nicholas

Recent work has proposed the Lempel-Ziv Jaccard Distance (LZJD) as a method to measure the similarity between binary byte sequences for malware classification. We propose and test…