Daniel Roberson
  • Posts
  • About
  • Notes
  • Projects
  • Time
  • Posts
    About
    Notes
    Projects
    Time

Levenshtein distance

0001-01-01

Levenshtein distance is an algorithm used to measure the difference between two strings that calculates the minimum number of single-character edits needed to transform one string to another.

Example:

totallylegit.com totally1egit.com

These two strings have a Levenshtein distance of 1, due to the homoglyph obfuscation of “l” and “1”

Levenshtein distance can be used to detect homoglyph attacks, spell checking, plagiarism detection, and other natural langage processing applications.


Links to this note

  • Main Index
  • Main Index - L

Recent Posts

Linux Persistence: Modular Software

2025-04-17 DFIR CTF persistence linux persistence apache asterisk

Linux Persistence: Web Shells

2025-04-16 DFIR persistence webshell linux persistence webshell apache nginx PHP

Linux Persistence: Rootkits

2025-04-15 DFIR persistence rootkit LKM linux persistence LKM rootkit LD_PRELOAD kprobe ftrace ld.so hooking

Linux Persistence: Processes

2025-04-11 DFIR persistence processes linux persistence processes

Defanging Linux LKM Rootkits With cleanup_module()

2025-04-05 Linux LKM rootkits EDR hooks incident response Linux LKM rootkit


Home

About

Notes

Projects

Time

© All rights reserved. Powered by Hugo and Erblog.