Authorship style identification in natural language has good intuition that one can work with. However, such notion in binary executive sounds totally nonsense. The only possibility that makes it work might originate from code reuse in a single organization, which is a classical feature to look into for malware detection.

So I have no idea what new information this arxiv paper provides other than to introduce an academic topic full of fancy terminologies.