De-anonymizing Programmers from Source Code
Greenstadt and Dr Caliskan presents de-anonymizing programmers from source code: Many hackers like to contribute code, binaries, and exploits under pseudonyms, but how anonymous are these contributions really?
Summary
Architecture and Background
Many hackers like to contribute code, binaries, and exploits under pseudonyms, but how anonymous are these contributions really?
Vulnerability Analysis
In this talk, we will discuss our work on programmer de-anonymization from the standpoint of machine learning.
Exploitation and Demonstrations
We will show how abstract syntax trees contain stylistic fingerprints and how these can be used to potentially identify programmers from code and binaries.
Remediation and Defensive Strategies
We perform programmer de-anonymization using both obfuscated binaries, and real-world code found in single-author GitHub repositories and the leaked Nulled.IO hacker forum.
Related talks
Main Stage·47 min
Alexei Bulazel
Alexei Bulazel presents reverse engineering windows defenders emulator: Windows Defender Antivirus's mpengine.dll implements the core of Defender's functionality in an enormous ~11 MB, 30,000+ function DLL.
Main Stage·25 min
Guang Gong
Guang Gong presents pwning thetoughest target, the largest bug bounty in the history of asr: In recent years, Google has made many great efforts in exploit mitigation and attack surface reduction to strengthen the s...
Main Stage·35 min
Yu Wang
Yu Wang presents attacking the macos kernel graphics driver: Just like the Windows platform, graphic drivers of macOS kernel are complicated and provide a large promising attack surface for EoPs and sandbox escapes...