Reflection Detection

[gfs]

I'm not sure how exactly this applies to other languages but this is a particular issue in C#.

Using Reflection can allow for dynamic behavior at runtime, including dynamic access to APIs which are not discernable at static analysis time. Application Inspector should report when an app using reflection in a way that would allow such behavior.

If you want a project to test reflection rules against see OAT.

Proposal:

I don't think we want to overgrab here, so there are some things that seem okay.

Check the Version Number by reflecting the assembly information from a type.
Read an embedded file

And things that are less common that might be interesting:

Create an object using invoke/constructorinfo
Loading assemblies at runtime
Invoke a method (for example using invoke method)
etc.