{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,22]],"date-time":"2026-10-22T00:18:03Z","timestamp":1792628283407,"version":"4.5.0"},"publisher-location":"Cham","reference-count":56,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031708954","type":"print"},{"value":"9783031708961","type":"electronic"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-70896-1_5","type":"book-chapter","created":{"date-parts":[[2024,9,5]],"date-time":"2024-09-05T12:03:57Z","timestamp":1725537837000},"page":"88-109","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["WASMixer: Binary Obfuscation for\u00a0WebAssembly"],"prefix":"10.1007","author":[{"given":"Shangtong","family":"Cao","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ningyu","family":"He","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yao","family":"Guo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Haoyu","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,9,6]]},"reference":[{"key":"5_CR1","unstructured":"AutoCAD web app (2023). https:\/\/web.autocad.com\/"},{"key":"5_CR2","unstructured":"Collatz conjecture (2023). https:\/\/en.wikipedia.org\/wiki\/Collatz_conjecture"},{"key":"5_CR3","unstructured":"Photoshop\u2019s journey to the web (2023). https:\/\/web.dev\/ps-on-the-web\/"},{"key":"5_CR4","unstructured":"VirusTotal official website (2023). https:\/\/en.wikipedia.org\/wiki\/LEB128"},{"key":"5_CR5","unstructured":"Ambient: Github Ambient repository (2023). https:\/\/github.com\/AmbientRun\/Ambient"},{"issue":"8","key":"5_CR6","doi-asserted-by":"publisher","first-page":"1978","DOI":"10.1016\/j.jss.2013.02.061","volume":"86","author":"S Anand","year":"2013","unstructured":"Anand, S., et al.: An orchestrated survey of methodologies for automated software test case generation. J. Syst. Softw. 86(8), 1978\u20132001 (2013)","journal-title":"J. Syst. Softw."},{"key":"5_CR7","doi-asserted-by":"crossref","unstructured":"Anckaert, B., Jakubowski, M., Venkatesan, R.: Proteus: virtualization for diversified tamper-resistance. In: Proceedings of the ACM Workshop on Digital Rights Management, pp. 47\u201358 (2006)","DOI":"10.1145\/1179509.1179521"},{"key":"5_CR8","unstructured":"Arteaga, J.C., Malivitsis, O., Perez, O.V., Baudry, B., Monperrus, M.: Crow: code diversification for webassembly. arXiv preprint arXiv:2008.07185 (2020)"},{"key":"5_CR9","doi-asserted-by":"publisher","first-page":"72","DOI":"10.1016\/j.cose.2016.05.003","volume":"61","author":"V Balachandran","year":"2016","unstructured":"Balachandran, V., Tan, D.J., Thing, V.L., et al.: Control flow obfuscation for android applications. Comput. Secur. 61, 72\u201393 (2016)","journal-title":"Comput. Secur."},{"key":"5_CR10","doi-asserted-by":"crossref","unstructured":"Banescu, S., Collberg, C., Ganesh, V., Newsham, Z., Pretschner, A.: Code obfuscation against symbolic execution attacks. In: Proceedings of the 32nd Annual Conference on Computer Security Applications, pp. 189\u2013200 (2016)","DOI":"10.1145\/2991079.2991114"},{"key":"5_CR11","doi-asserted-by":"crossref","unstructured":"Bhansali, S., Aris, A., Acar, A., Oz, H., Uluagac, A.S.: A first look at code obfuscation for webassembly. In: Proceedings of the 15th ACM Conference on Security and Privacy in Wireless and Mobile Networks, pp. 140\u2013145 (2022)","DOI":"10.1145\/3507657.3528560"},{"key":"5_CR12","unstructured":"Binaryen: Github Binaryen repository (2023). https:\/\/github.com\/WebAssembly\/binaryen"},{"key":"5_CR13","unstructured":"Blazor: Blazor official webpage (2023). https:\/\/dotnet.microsoft.com\/en-us\/apps\/aspnet\/web-apps\/blazor"},{"key":"5_CR14","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102745","volume":"118","author":"T Brito","year":"2022","unstructured":"Brito, T., Lopes, P., Santos, N., Santos, J.F.: Wasmati: an efficient static vulnerability scanner for webassembly. Comput. Secur. 118, 102745 (2022)","journal-title":"Comput. Secur."},{"key":"5_CR15","doi-asserted-by":"crossref","unstructured":"Cabrera-Arteaga, J., Monperrus, M., Toady, T., Baudry, B.: Webassembly diversification for malware evasion. arXiv preprint arXiv:2212.08427 (2022)","DOI":"10.1016\/j.cose.2023.103296"},{"key":"5_CR16","unstructured":"Collberg, C., Thomborson, C., Low, D.: A taxonomy of obfuscating transformations. Technical report. Department of Computer Science, The University of Auckland, New Zealand (1997)"},{"key":"5_CR17","unstructured":"Collections-C: Github Collections-C repository (2023). https:\/\/github.com\/srdja\/Collections-C"},{"key":"5_CR18","unstructured":"Collections-c-for-gillian: Github collections-c-for-gillian repository (2023). https:\/\/github.com\/GillianPlatform\/collections-c-for-gillian"},{"key":"5_CR19","unstructured":"Emscripten: Emscripten official website (2023). https:\/\/emscripten.org\/"},{"key":"5_CR20","doi-asserted-by":"crossref","unstructured":"Haas, A., et al.: Bringing the web up to speed with webassembly. In: Proceedings of the 38th ACM SIGPLAN Conference on Programming Language Design and Implementation, pp. 185\u2013200 (2017)","DOI":"10.1145\/3062341.3062363"},{"key":"5_CR21","doi-asserted-by":"crossref","unstructured":"Hall, A., Ramachandran, U.: An execution model for serverless functions at the edge. In: Proceedings of the International Conference on Internet of Things Design and Implementation, pp. 225\u2013236 (2019)","DOI":"10.1145\/3302505.3310084"},{"key":"5_CR22","doi-asserted-by":"crossref","unstructured":"Ha\u00dfler, K., Maier, D.: Wafl: binary-only webassembly fuzzing with fast snapshots. In: Reversing and Offensive-oriented Trends Symposium, pp. 23\u201330 (2021)","DOI":"10.1145\/3503921.3503924"},{"key":"5_CR23","unstructured":"He, N., et al.: Eosafe: security analysis of eosio smart contracts. In: USENIX Security Symposium, pp. 1271\u20131288 (2021)"},{"key":"5_CR24","doi-asserted-by":"crossref","unstructured":"Hilbig, A., Lehmann, D., Pradel, M.: An empirical study of real-world webassembly binaries: security, languages, use cases. In: Proceedings of the Web Conference 2021, pp. 2696\u20132708 (2021)","DOI":"10.1145\/3442381.3450138"},{"issue":"2","key":"5_CR25","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1049\/ip-sen:20050010","volume":"153","author":"TW Hou","year":"2006","unstructured":"Hou, T.W., Chen, H.Y., Tsai, M.H.: Three control flow obfuscation methods for java software. IEE Proc.-Softw. 153(2), 80\u201386 (2006)","journal-title":"IEE Proc.-Softw."},{"key":"5_CR26","doi-asserted-by":"crossref","unstructured":"Junod, P., Rinaldini, J., Wehrli, J., Michielin, J.: Obfuscator-llvm\u2013software protection for the masses. In: 2015 IEEE\/ACM 1st International Workshop on Software Protection, pp.\u00a03\u20139. IEEE (2015)","DOI":"10.1109\/SPRO.2015.10"},{"issue":"1","key":"5_CR27","first-page":"3","volume":"30","author":"T L\u00e1szl\u00f3","year":"2009","unstructured":"L\u00e1szl\u00f3, T., Kiss, \u00c1.: Obfuscating c++ programs via control flow flattening. Annales Universitatis Scientarum Budapestinensis de Rolando E\u00f6tv\u00f6s Nominatae, Sectio Computatorica 30(1), 3\u201319 (2009)","journal-title":"Annales Universitatis Scientarum Budapestinensis de Rolando E\u00f6tv\u00f6s Nominatae, Sectio Computatorica"},{"key":"5_CR28","unstructured":"Lehmann, D., Kinder, J., Pradel, M.: Everything old is new again: binary security of webassembly. In: Proceedings of the 29th USENIX Conference on Security Symposium, pp. 217\u2013234 (2020)"},{"key":"5_CR29","doi-asserted-by":"crossref","unstructured":"Lehmann, D., Pradel, M.: Finding the dwarf: recovering pecise types from webassembly binaries. In: Proceedings of the 43rd ACM SIGPLAN International Conference on Programming Language Design and Implementation, pp. 410\u2013425 (2022)","DOI":"10.1145\/3519939.3523449"},{"key":"5_CR30","doi-asserted-by":"crossref","unstructured":"Lehmann, D., Thalakottur, M., Tip, F., Pradel, M.: That\u2019sa tough call: studying the challenges of call graph construction for webassembly. In: Symposium on Software Testing and Analysis (ISSTA 2023) (2023)","DOI":"10.1145\/3597926.3598104"},{"key":"5_CR31","unstructured":"Lehmann, D., Torp, M.T., Pradel, M.: Fuzzm: finding memory bugs through binary-only instrumentation and fuzzing of webassembly. arXiv preprint arXiv:2110.15433 (2021)"},{"key":"5_CR32","doi-asserted-by":"crossref","unstructured":"Linn, C., Debray, S.: Obfuscation of executable code to improve resistance to static disassembly. In: Proceedings of the 10th ACM Conference on Computer and Communications Security, pp. 290\u2013299 (2003)","DOI":"10.1145\/948109.948149"},{"key":"5_CR33","unstructured":"Marques, F., Fragoso\u00a0Santos, J., Santos, N., Ad\u00e3o, P.: Concolic execution for webassembly. In: 36th European Conference on Object-Oriented Programming (ECOOP 2022). Schloss Dagstuhl-Leibniz-Zentrum f\u00fcr Informatik (2022)"},{"key":"5_CR34","unstructured":"MDN: MDN web docs website (2023). https:\/\/developer.mozilla.org\/en-US\/docs\/WebAssembly\/Rust_to_wasm"},{"key":"5_CR35","doi-asserted-by":"crossref","unstructured":"Mossberg, M., et al.: Manticore: a user-friendly symbolic execution framework for binaries and smart contracts. In: 2019 34th IEEE\/ACM International Conference on Automated Software Engineering (ASE), pp. 1186\u20131189. IEEE (2019)","DOI":"10.1109\/ASE.2019.00133"},{"key":"5_CR36","unstructured":"obfuscation-benchmarks: Github obfuscation-benchmarks repository (2023). https:\/\/github.com\/tum-i4\/obfuscation-benchmarks\/tree\/master\/basic-algorithms"},{"key":"5_CR37","doi-asserted-by":"crossref","unstructured":"Ollivier, M., Bardin, S., Bonichon, R., Marion, J.Y.: How to kill symbolic deobfuscation for free (2019)","DOI":"10.1145\/3371307.3371309"},{"key":"5_CR38","doi-asserted-by":"crossref","unstructured":"Romano, A., Zheng, Y., Wang, W.: Minerray: semantics-aware analysis for ever-evolving cryptojacking detection. In: Proceedings of the 35th IEEE\/ACM International Conference on Automated Software Engineering, pp. 1129\u20131140 (2020)","DOI":"10.1145\/3324884.3416580"},{"key":"5_CR39","unstructured":"Schloegel, M., et al.: Loki: hardening code obfuscation against automated attacks. In: 31st USENIX Security Symposium (USENIX Security 2022), pp. 3055\u20133073 (2022)"},{"key":"5_CR40","doi-asserted-by":"crossref","unstructured":"Schwartz, E.J., Avgerinos, T., Brumley, D.: All you ever wanted to know about dynamic taint analysis and forward symbolic execution (but might have been afraid to ask). In: 2010 IEEE Symposium on Security and Privacy, pp. 317\u2013331. IEEE (2010)","DOI":"10.1109\/SP.2010.26"},{"key":"5_CR41","doi-asserted-by":"crossref","unstructured":"Seto, T., Monden, A., Y\u00fccel, Z., Kanzaki, Y.: On preventing symbolic execution attacks by low cost obfuscation. In: 2019 20th IEEE\/ACIS International Conference on Software Engineering, Artificial Intelligence, Networking and Parallel\/Distributed Computing (SNPD), pp. 495\u2013500. IEEE (2019)","DOI":"10.1109\/SNPD.2019.8935642"},{"key":"5_CR42","doi-asserted-by":"crossref","unstructured":"Sti\u00e9venart, Q., Binkley, D.W., De\u00a0Roover, C.: Static stack-preserving intra-procedural slicing of webassembly binaries. In: Proceedings of the 44th International Conference on Software Engineering, pp. 2031\u20132042 (2022)","DOI":"10.1145\/3510003.3510070"},{"key":"5_CR43","unstructured":"tigress: tigress official website (2023). https:\/\/tigress.wtf\/index.html"},{"key":"5_CR44","unstructured":"TinyGo: TinyGo official docs webpage (2023). https:\/\/tinygo.org\/docs\/guides\/webassembly\/"},{"issue":"4","key":"5_CR45","doi-asserted-by":"publisher","first-page":"1126","DOI":"10.1093\/molbev\/msv333","volume":"33","author":"A Veidenberg","year":"2016","unstructured":"Veidenberg, A., Medlar, A., L\u00f6ytynoja, A.: Wasabi: an integrated platform for evolutionary sequence analysis and data visualization. Mol. Biol. Evol. 33(4), 1126\u20131130 (2016)","journal-title":"Mol. Biol. Evol."},{"key":"5_CR46","unstructured":"wabt: Github wabt repository (2023). https:\/\/github.com\/WebAssembly\/wabt"},{"key":"5_CR47","doi-asserted-by":"crossref","unstructured":"Wang, D., Jiang, B., Chan, W.: Wana: symbolic execution of wasm bytecode for cross-platform smart contract vulnerability detection. arXiv preprint arXiv:2007.15510 (2020)","DOI":"10.1109\/QRS54544.2021.00102"},{"key":"5_CR48","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"122","DOI":"10.1007\/978-3-319-98989-1_7","volume-title":"Computer Security","author":"W Wang","year":"2018","unstructured":"Wang, W., Ferrell, B., Xu, X., Hamlen, K.W., Hao, S.: SEISMIC: SEcure in-lined script monitors for interrupting cryptojacks. In: Lopez, J., Zhou, J., Soriano, M. (eds.) ESORICS 2018. LNCS, vol. 11099, pp. 122\u2013142. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-319-98989-1_7"},{"key":"5_CR49","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"210","DOI":"10.1007\/978-3-642-23822-2_12","volume-title":"Computer Security \u2013 ESORICS 2011","author":"Z Wang","year":"2011","unstructured":"Wang, Z., Ming, J., Jia, C., Gao, D.: Linear obfuscation to combat symbolic execution. In: Atluri, V., Diaz, C. (eds.) ESORICS 2011. LNCS, vol. 6879, pp. 210\u2013226. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-23822-2_12"},{"key":"5_CR50","unstructured":"wapm: wapm official website (2023). https:\/\/wapm.io\/"},{"key":"5_CR51","unstructured":"wasp: Github wasp repository (2023). https:\/\/github.com\/wasp-platform\/wasp\/tree\/main\/wasp\/tests"},{"key":"5_CR52","unstructured":"webasm: webasm official webpage (2023). https:\/\/www.mainconcept.com\/webasm"},{"key":"5_CR53","unstructured":"WebAssembly: Github wasi-sdk repository (2023). https:\/\/github.com\/WebAssembly\/wasi-sdk"},{"key":"5_CR54","doi-asserted-by":"crossref","unstructured":"Xu, H., Zhou, Y., Kang, Y., Tu, F., Lyu, M.: Manufacturing resilient bi-opaque predicates against symbolic execution. In: 2018 48th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN), pp. 666\u2013677. IEEE (2018)","DOI":"10.1109\/DSN.2018.00073"},{"key":"5_CR55","doi-asserted-by":"crossref","unstructured":"Zakai, A.: Emscripten: an llvm-to-javascript compiler. In: Proceedings of the ACM International Conference Companion on Object Oriented Programming Systems Languages and Applications Companion, pp. 301\u2013312 (2011)","DOI":"10.1145\/2048147.2048224"},{"key":"5_CR56","doi-asserted-by":"crossref","unstructured":"Zhang, F., Huang, H., Zhu, S., Wu, D., Liu, P.: Viewdroid: towards obfuscation-resilient mobile application repackaging detection. In: Proceedings of the 2014 ACM Conference on Security and Privacy in Wireless & Mobile Networks, pp. 25\u201336 (2014)","DOI":"10.1145\/2627393.2627395"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2024"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-70896-1_5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,5]],"date-time":"2024-09-05T12:06:13Z","timestamp":1725537973000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-70896-1_5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031708954","9783031708961"],"references-count":56,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-70896-1_5","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"6 September 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Bydgoszcz","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Poland","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"16 September 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20 September 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/esorics2024.org","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}