Recently I was working on a project involving [2308.03123], and I thought it'd be helpful to share some insights.
Have questions? Feel free to ask in the comments section below.
正文
View a PDF of the paper titled WASMixer: Binary Obfuscation for WebAssembly, by Shangtong Cao and 3 other authors
WebAssembly (Wasm) is an emerging binary format that draws great attention from our community. However, Wasm binaries are weakly protected, as they can be read, edited, and manipulated by adversaries using either the officially provided readable text format (i.e., wat) or some advanced binary analysis tools. Reverse engineering of Wasm binaries is often used for nefarious intentions, e.g., identifying and exploiting both classic vulnerabilities and Wasm specific vulnerabilities exposed in the binaries. However, no Wasm-specific obfuscator is available in our community to secure the Wasm binaries. To fill the gap, in this paper, we present WASMixer, the first general-purpose Wasm binary obfuscator, enforcing data-level (string literals and function names) and code-level (control flow and instructions) obfuscation for Wasm binaries. We propose a series of key techniques to overcome challenges during Wasm binary rewriting, including an on-demand decryption method to minimize the impact brought by decrypting the data in memory area, and code splitting/reconstructing algorithms to handle structured control flow in Wasm. Extensive experiments demonstrate the correctness, effectiveness and efficiency of WASMixer. Our research has shed light on the promising direction of Wasm binary research, including Wasm code protection, Wasm binary diversification, and the attack-defense arm race of Wasm binaries.
https://doi.org/10.48550/arXiv.2308.03123 arXiv-issued DOI via DataCite
View a PDF of the paper titled WASMixer: Binary Obfuscation for WebAssembly, by Shangtong Cao and 3 other authors
Bibliographic and Citation Tools Bibliographic Explorer Toggle
CatalyzeX Code Finder for Papers Recommenders and Search Tools What are Influence Flowers?
arXivLabs: experimental projects with community collaborators
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs
More Details
There are a few more points worth noting. First, browser compatibility varies across different browsers. Second, performance optimization is crucial when handling large amounts of data. Finally, key management is also an important consideration.
Due to length constraints, I'll wrap up here. More practical examples coming soon. Leave a comment if you have questions!
Reference: [2308.03123] WASMixer: Binary Obfuscation for WebAssembly - arXiv
Comments | NOTHING