Artifacts for Paper: Standards-to-Surface: A Comprehensive Evaluation of Windows Code-Signing (Non)Compliance

Artifacts and Datasets for Paper: Standards-to-Surface: A Comprehensive Evaluation of Windows Code-Signing (Non)Compliance This artifact consists of three main parts: (1) the source code of CSLint, our linting tool for auditing code-signing certificates, located in the folder named "CSLint"; (2) the source code of AuthentiCheck, our automated framework for evaluating the security impact of non-compliant code-signing certificates across nine verification surfaces, located in the folder named "AuthentiCheck". Specifically, the "cert_clone_gen3.py" script is used for certificate cloning, chain reconstruction, and sample re-signing, while the scripts in the "auto_test_framework" folder are used for automated testing across the nine verification surfaces; and (3) a labeled dataset of non-compliant certificates, located in the folder named "cloned_certs_dataset". Specifically, the "cloned_leaf_certs" and "cloned_root_certs" folders contain the cloned certificate files, while the "cslint_leaf_error.txt" and "cslint_leaf_warn.txt" files record the specific lint entries triggered by the certificates. For ethical considerations, the publicly released dataset includes only cloned and reconstructed certificates whose originals have expired.