Stylometric analysis of 23,305 YARA rules shows that repository origin, authors, and malware families can be identified with high accuracy from rule text alone.
Pardo, and Javier Fresno
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CR 1years
2026 1verdicts
UNVERDICTED 1representative citing papers
citing papers explorer
-
Anonymous YARA Rules Are Not Anonymous
Stylometric analysis of 23,305 YARA rules shows that repository origin, authors, and malware families can be identified with high accuracy from rule text alone.