arrow
返回

WASM-MUTATE: Fast and effective binary diversification for WebAssembly

delete2024-04-01
delete1
delete
OA
AI
J
Javier Cabrera-Arteaga *
N
Nicholas B. Fitzgerald
M
Martin Monperrus
B
Benoît Baudry
DOI:10.1016/j.cose.2024.103731delete
delete原文链接
delete分享
delete收藏
查看原文
摘要

摘要

En 中文
WebAssembly is the fourth officially endorsed Web language. It is recognized because of its efficiency and design, focused on security. Yet, its swiftly expanding ecosystem lacks robust software diversification systems. We introduce WASM-MUTATE, a diversification engine specifically designed for WebAssembly. Our engine meets several essential criteria: 1) To quickly generate functionally identical, yet behaviorally diverse, WebAssembly variants, 2) To be universally applicable to any WebAssembly program, irrespective of the source programming language, and 3) Generated variants should counter side -channels. By leveraging an e -graph data structure, WASM-MUTATE is implemented to meet both speed and efficacy. We evaluate WASM-MUTATE by conducting experiments on 404 programs, which include real -world applications. Our results highlight that WASM-MUTATE can produce tens of thousands of unique and efficient WebAssembly variants within minutes. Significantly, WASM-MUTATE can safeguard WebAssembly binaries against timing side -channel attacks, especially those of the Spectre type.
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

C
Computers and Security
IF:
5.4
论文数:
4.6K
被引数:
1.4W

机构

R
Royal Institute of Technology
学者数:
1.8W
论文数: 1.8W
被引数: 25
引用论文

引用论文

What is the shape of the fundamental Grinnellian niche?
err2019-05-16
err0
PREAI
errJorge Soberón; A. Townsend Peterson
err分享
err收藏
Wasmati: An efficient static vulnerability scanner for WebAssembly
err2022-07-01
err11
errOAAI
errBrito, Tiago; Lopes, Pedro; Santos, Nuno; Santos, Jose Fragoso
err分享
err收藏
WebAssembly diversification for malware evasion用于恶意软件规避的WebAssembly多样化
err2023-08-01
err2
errOAAI
errCabrera-Arteaga, Javier; Monperrus, Martin; Toady, Tim; Baudry, Benoit
err分享
err收藏
没有更多内容