No abstract

No abstract

This research is an attempt toward facilitating the authorship attribution of an unknown .NET executable by identifying obfuscation resistant features of .NET binaries. The primary goal of this study is to examine the effectiveness of obfuscation techniques for hiding the author's programming style. In this research, I have tested features such as op-code frequencies, op-code n-grams, API function calls and some features obtained from program Control Flow Graph.

No abstract