Stylometric Defenses Against Author Impersonation in Software Repositories

Leonid Ravich, Michael Fire

Software supply-chain attacks increasingly exploit an identity gap where compromised maintainer accounts authorize malicious changes. This work evaluates patch-level authorship ver…