Not In My Git Yard: Catching Backdoors at Commit and Release Time
Lily is presented, an automated approach that strengthens open-source development and release processes against backdoor injection and achieves high detection accuracy with low false alarm rates, reliably identifies malicious code, resists adversarial attempts, and would have prevented real-world backdoor incidents.