A method is provided for comparing malware or other types of computer programs, and for optionally using such a comparison method for (a) searching for matching programs in a collection of programs, (b) classifying programs, and (c) constructing a classification or a partitioning within a collection...http://www.google.se/patents/US7873947?utm_source=gb-gplus-sharePatent US7873947 - Phylogeny generation
