{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,18]],"date-time":"2026-08-18T06:23:56Z","timestamp":1787034236804,"version":"build-2736575974"},"publisher-location":"Singapore","reference-count":56,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819535361","type":"print"},{"value":"9789819535378","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,10,20]],"date-time":"2025-10-20T00:00:00Z","timestamp":1760918400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,10,20]],"date-time":"2025-10-20T00:00:00Z","timestamp":1760918400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-981-95-3537-8_5","type":"book-chapter","created":{"date-parts":[[2025,10,19]],"date-time":"2025-10-19T10:43:15Z","timestamp":1760870595000},"page":"77-96","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["PowerPoly: Analyzing Multilingual Programs with\u00a0the\u00a0Aid of\u00a0WebAssembly"],"prefix":"10.1007","author":[{"given":"Zhuochen","family":"Jiang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Baojian","family":"Hua","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,10,20]]},"reference":[{"key":"5_CR1","unstructured":"WebAssembly on Cloudflare Workers (2018). http:\/\/blog.cloudflare.com\/webassembly-on-cloudflare-workers\/"},{"key":"5_CR2","unstructured":"Apple: Safari (2024). https:\/\/www.apple.com\/safari\/"},{"key":"5_CR3","doi-asserted-by":"publisher","unstructured":"Arteaga, J.C., Malivitsis, O., P\u00e9rez, O.V., Baudry, B., Monperrus, M.: CROW: code diversification for WebAssembly. In: Proceedings 2021 Workshop on Measurements, Attacks, and Defenses for the Web (2021). https:\/\/doi.org\/10.14722\/madweb.2021.23004","DOI":"10.14722\/madweb.2021.23004"},{"key":"5_CR4","doi-asserted-by":"publisher","unstructured":"Bian, W., Meng, W., Wang, Y.: Poster: detecting Webassembly-based cryptocurrency mining. In: Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, pp. 2685\u20132687 (2019). https:\/\/doi.org\/10.1145\/3319535.3363287","DOI":"10.1145\/3319535.3363287"},{"key":"5_CR5","unstructured":"Bytecodealliance: Wasm-micro-runtime: Webassembly micro runtime (WAMR) (2024). https:\/\/github.com\/bytecodealliance\/wasm-micro-runtime"},{"key":"5_CR6","unstructured":"Bytecodealliance: Wasmtime: a standalone runtime for WebAssembly (2024). https:\/\/github.com\/bytecodealliance\/wasmtime"},{"key":"5_CR7","doi-asserted-by":"publisher","unstructured":"Chen, W., Sun, Z., Wang, H., Luo, X., Cai, H., Wu, L.: WASAI: uncovering vulnerabilities in Wasm smart contracts. In: Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis, pp. 703\u2013715. ACM, Virtual South Korea (2022). https:\/\/doi.org\/10.1145\/3533767.3534218","DOI":"10.1145\/3533767.3534218"},{"key":"5_CR8","unstructured":"CWE: CWE-658: Weaknesses in Software Written in C (4.14) (2024). https:\/\/cwe.mitre.org\/data\/definitions\/658.html"},{"key":"5_CR9","unstructured":"Emscripten-Core: Emscripten: Emscripten: an LLVM-to-WebAssembly Compiler (2024). https:\/\/github.com\/emscripten-core\/emscripten"},{"key":"5_CR10","doi-asserted-by":"publisher","unstructured":"Evans, A.N., Campbell, B., Soffa, M.L.: Is rust used safely by software developers? In: Proceedings of the ACM\/IEEE 42nd International Conference on Software Engineering, pp. 246\u2013257 (2020). https:\/\/doi.org\/10.1145\/3377811.3380413","DOI":"10.1145\/3377811.3380413"},{"key":"5_CR11","unstructured":"Firefox: Language details of the Firefox repo (2024). https:\/\/4e6.github.io\/firefox-lang-stats\/"},{"issue":"4","key":"5_CR12","doi-asserted-by":"publisher","first-page":"18:1","DOI":"10.1145\/1377492.1377493","volume":"30","author":"M Furr","year":"2008","unstructured":"Furr, M., Foster, J.S.: Checking type safety of foreign function calls. ACM Trans. Program. Lang. Syst. 30(4), 18:1-18:63 (2008). https:\/\/doi.org\/10.1145\/1377492.1377493","journal-title":"ACM Trans. Program. Lang. Syst."},{"key":"5_CR13","unstructured":"gchers: EMD - a simple Rust library for computing the Earth Mover\u2019s Distance (2024). https:\/\/github.com\/gchers\/rust-emd"},{"key":"5_CR14","doi-asserted-by":"publisher","unstructured":"Haas, A., et al.: Bringing the web up to speed with WebAssembly. In: Proceedings of the 38th ACM SIGPLAN Conference on Programming Language Design and Implementation, pp. 185\u2013200. ACM, Barcelona, Spain (2017). https:\/\/doi.org\/10.1145\/3062341.3062363","DOI":"10.1145\/3062341.3062363"},{"key":"5_CR15","doi-asserted-by":"publisher","unstructured":"Hall, A., Ramachandran, U.: An execution model for serverless functions at the edge. In: Proceedings of the International Conference on Internet of Things Design and Implementation, pp. 225\u2013236. IoTDI \u201919, Association for Computing Machinery, New York, NY, USA (2019). https:\/\/doi.org\/10.1145\/3302505.3310084","DOI":"10.1145\/3302505.3310084"},{"issue":"7825","key":"5_CR16","doi-asserted-by":"publisher","first-page":"357","DOI":"10.1038\/s41586-020-2649-2","volume":"585","author":"CR Harris","year":"2020","unstructured":"Harris, C.R., et al.: Array programming with numpy. Nature 585(7825), 357\u2013362 (2020). https:\/\/doi.org\/10.1038\/s41586-020-2649-2","journal-title":"Nature"},{"key":"5_CR17","doi-asserted-by":"publisher","unstructured":"Hu, M., Zhang, Y.: The Python\/C API: evolution, usage statistics, and bug patterns. In: 2020 IEEE 27th International Conference on Software Analysis, Evolution and Reengineering (SANER), pp. 532\u2013536 (2020). https:\/\/doi.org\/10.1109\/SANER48275.2020.9054835","DOI":"10.1109\/SANER48275.2020.9054835"},{"key":"5_CR18","doi-asserted-by":"publisher","unstructured":"Hu, M., Zhao, Q., Zhang, Y., Xiong, Y.: Cross-language call graph construction supporting different host languages. In: 2023 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER), pp. 155\u2013166. IEEE, Taipa, Macao (2023). https:\/\/doi.org\/10.1109\/SANER56733.2023.00024","DOI":"10.1109\/SANER56733.2023.00024"},{"key":"5_CR19","doi-asserted-by":"publisher","unstructured":"Hu, S., Hua, B., Xia, L., Wang, Y.: CRUST: towards a unified cross-language program analysis framework for rust. In: 2022 IEEE 22nd International Conference on Software Quality, Reliability and Security (QRS), pp. 970\u2013981. IEEE, Guangzhou, China (2022). https:\/\/doi.org\/10.1109\/QRS57517.2022.00101","DOI":"10.1109\/QRS57517.2022.00101"},{"key":"5_CR20","doi-asserted-by":"publisher","unstructured":"Jiang, B., Li, Z., Huang, Y., Zhang, Z., Chan, W.K.: WasmFuzzer: a Fuzzer for WasAssembly virtual machines. In: The 34th International Conference on Software Engineering and Knowledge Engineering, pp. 537\u2013542 (2022). https:\/\/doi.org\/10.18293\/SEKE2022-165","DOI":"10.18293\/SEKE2022-165"},{"key":"5_CR21","doi-asserted-by":"publisher","unstructured":"Kelton, C., Balasubramanian, A., Raghavendra, R., Srivatsa, M.: Browser-based deep behavioral detection of web Cryptomining with CoinSpy. In: Proceedings 2020 Workshop on Measurements, Attacks, and Defenses for the Web. Internet Society, San Diego, CA (2020). https:\/\/doi.org\/10.14722\/madweb.2020.23002","DOI":"10.14722\/madweb.2020.23002"},{"key":"5_CR22","doi-asserted-by":"publisher","unstructured":"Kochhar, P.S., Wijedasa, D., Lo, D.: A large scale study of multiple programming languages and code quality. In: 2016 IEEE 23rd International Conference on Software Analysis, Evolution, and Reengineering (SANER), pp. 563\u2013573. IEEE, Suita (2016). https:\/\/doi.org\/10.1109\/SANER.2016.112","DOI":"10.1109\/SANER.2016.112"},{"key":"5_CR23","doi-asserted-by":"crossref","unstructured":"Lehmann, D., Pradel, M.: Wasabi: a framework for dynamically analyzing WebAssembly. arXiv preprint arXiv:1808.10652 (2018)","DOI":"10.1145\/3297858.3304068"},{"key":"5_CR24","doi-asserted-by":"publisher","unstructured":"Lehmann, D., Thalakottur, M., Tip, F., Pradel, M.: That\u2019s a tough call: studying the challenges of call graph construction for WebAssembly. In: Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis, pp. 892\u2013903. ACM, Seattle, WA, USA (2023). https:\/\/doi.org\/10.1145\/3597926.3598104","DOI":"10.1145\/3597926.3598104"},{"key":"5_CR25","unstructured":"Lehmann, D., Torp, M.T., Pradel, M.: Fuzzm: finding memory bugs through binary-only instrumentation and fuzzing of WebAssembly. arXiv preprint arXiv:2110.15433 (2021)"},{"key":"5_CR26","doi-asserted-by":"publisher","unstructured":"Li, S., Tan, G.: Finding bugs in exceptional situations of JNI programs. In: Proceedings of the 16th ACM Conference on Computer and Communications Security, pp. 442\u2013452. CCS \u201909, Association for Computing Machinery, New York, NY, USA (2009). https:\/\/doi.org\/10.1145\/1653662.1653716","DOI":"10.1145\/1653662.1653716"},{"key":"5_CR27","unstructured":"Li, W., Ming, J., Luo, X., Cai, H.: PolyCruise: a cross-language dynamic information flow analysis. In: 31st USENIX Security Symposium (USENIX Security 22), pp. 2513\u20132530 (2022)"},{"key":"5_CR28","doi-asserted-by":"publisher","unstructured":"Li, Z., Wang, J., Sun, M., Lui, J.C.S.: Detecting cross-language memory management issues in rust. In: Atluri, V., Di\u00a0Pietro, R., Jensen, C.D., Meng, W. (eds.) Computer Security \u2013 ESORICS 2022, vol. 13556, pp. 680\u2013700. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-17143-7_33","DOI":"10.1007\/978-3-031-17143-7_33"},{"key":"5_CR29","doi-asserted-by":"publisher","unstructured":"Li, Z., Wang, J., Sun, M., Lui, J.C.: MirChecker: detecting bugs in rust programs via static analysis. In: Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, pp. 2183\u20132196. ACM, Virtual Event Republic of Korea (2021). https:\/\/doi.org\/10.1145\/3460120.3484541","DOI":"10.1145\/3460120.3484541"},{"key":"5_CR30","unstructured":"Liu, R., Garcia, L., Srivastava, M.: Aerogel: lightweight access control framework for WebAssembly-based bare-metal IoT devices, p.\u00a012 (2021)"},{"key":"5_CR31","unstructured":"LLVM: The LLVM compiler infrastructure project (2024). https:\/\/llvm.org\/"},{"key":"5_CR32","unstructured":"Lucet: Lucet takes WebAssembly beyond the browser | Fastly (2024). https:\/\/www.fastly.com\/blog\/announcing-lucet-fastly-native-webassembly-compiler-runtime"},{"issue":"2","key":"5_CR33","doi-asserted-by":"publisher","first-page":"531","DOI":"10.1145\/2980024.2872389","volume":"44","author":"J Mao","year":"2016","unstructured":"Mao, J., Chen, Y., Xiao, Q., Shi, Y.: RID: finding reference count bugs with inconsistent path pair checking. ACM SIGARCH Comput. Archit. News 44(2), 531\u2013544 (2016). https:\/\/doi.org\/10.1145\/2980024.2872389","journal-title":"ACM SIGARCH Comput. Archit. News"},{"key":"5_CR34","doi-asserted-by":"publisher","unstructured":"Mergendahl, S., Burow, N., Okhravi, H.: Cross-language attacks. In: Proceedings 2022 Network and Distributed System Security Symposium (2022). https:\/\/doi.org\/10.14722\/ndss.2022.24078","DOI":"10.14722\/ndss.2022.24078"},{"key":"5_CR35","unstructured":"Mozilla: Standardizing WASI: a system interface to run WebAssembly outside the web (2024). https:\/\/hacks.mozilla.org\/2019\/03\/standardizing-wasi-a-webassembly-system-interface"},{"key":"5_CR36","doi-asserted-by":"publisher","first-page":"599","DOI":"10.1016\/j.procs.2020.10.085","volume":"177","author":"P Ning","year":"2020","unstructured":"Ning, P., Qin, B.: Stuck-me-not: a deadlock detector on blockchain software in rust. Procedia Comput. Sci. 177, 599\u2013604 (2020). https:\/\/doi.org\/10.1016\/j.procs.2020.10.085","journal-title":"Procedia Comput. Sci."},{"key":"5_CR37","unstructured":"Oracle: Java native interface specification contents (2024). https:\/\/docs.oracle.com\/javase\/8\/docs\/technotes\/guides\/jni\/spec\/jniTOC.html"},{"key":"5_CR38","unstructured":"Paszke, A., et al.: PyTorch: an imperative style, high-performance deep learning library. In: Advances in Neural Information Processing Systems, vol.\u00a032. Curran Associates, Inc. (2019)"},{"key":"5_CR39","doi-asserted-by":"publisher","unstructured":"Qin, B., Chen, Y., Yu, Z., Song, L., Zhang, Y.: Understanding memory and thread safety practices and issues in real-world rust programs. In: Proceedings of the 41st ACM SIGPLAN Conference on Programming Language Design and Implementation, pp. 763\u2013779 (2020). https:\/\/doi.org\/10.1145\/3385412.3386036","DOI":"10.1145\/3385412.3386036"},{"key":"5_CR40","unstructured":"Rust: What is rustc? - the rustc book (2024). https:\/\/doc.rust-lang.org\/rustc\/what-is-rustc.html"},{"key":"5_CR41","unstructured":"Rustc: MIR (2024). https:\/\/rustc-dev-guide.rust-lang.org\/mir\/index.html"},{"key":"5_CR42","doi-asserted-by":"publisher","unstructured":"Sun, H., Zhang, X., Su, C., Zeng, Q.: Efficient dynamic tracking technique for detecting integer-overflow-to-buffer-overflow vulnerability. In: Proceedings of the 10th ACM Symposium on Information, Computer and Communications Security, pp. 483\u2013494. ASIA CCS \u201915, Association for Computing Machinery, New York, NY, USA (2015). https:\/\/doi.org\/10.1145\/2714576.2714605","DOI":"10.1145\/2714576.2714605"},{"key":"5_CR43","unstructured":"Tan, G., Croft, J.: An empirical security study of the native code in the JDK. In: Proceedings of the 17th Conference on Security Symposium, pp. 365\u2013377. SS\u201908, USENIX Association, USA (2008)"},{"issue":"10","key":"5_CR44","doi-asserted-by":"publisher","first-page":"39","DOI":"10.1145\/1297105.1297031","volume":"42","author":"G Tan","year":"2007","unstructured":"Tan, G., Morrisett, G.: ILEA: inter-language analysis across Java and C. ACM SIGPLAN Notices 42(10), 39\u201356 (2007). https:\/\/doi.org\/10.1145\/1297105.1297031","journal-title":"ACM SIGPLAN Notices"},{"key":"5_CR45","unstructured":"Govulncheck Team: Govulncheck v1.0.0 is released! (2024). https:\/\/go.dev\/blog\/govulncheck"},{"key":"5_CR46","unstructured":"TinyGo-Org: TinyGo - go compiler for small places (2024). https:\/\/github.com\/tinygo-org\/tinygo"},{"key":"5_CR47","unstructured":"V8: V8 JavaScript engine (2024). https:\/\/v8.dev\/"},{"key":"5_CR48","unstructured":"W3: WebAssembly becomes a W3C recommendation (2024). https:\/\/www.w3.org\/2019\/12\/pressrelease-wasm-rec.html.en"},{"key":"5_CR49","unstructured":"WASM3: WASM3: a fast WebAssembly interpreter and the most universal WASM runtime. (2024). https:\/\/github.com\/wasm3\/wasm3"},{"key":"5_CR50","unstructured":"WASMerio: Py2WASM (2024). https:\/\/github.com\/wasmerio\/py2wasm"},{"issue":"OOPSLA","key":"5_CR51","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3360559","volume":"3","author":"C Watt","year":"2019","unstructured":"Watt, C., Rossberg, A., Pichon-Pharabod, J.: Weakening WebAssembly. Proc. ACM Program. Lang. 3(OOPSLA), 1\u201328 (2019). https:\/\/doi.org\/10.1145\/3360559","journal-title":"Proc. ACM Program. Lang."},{"key":"5_CR52","unstructured":"WebAssembly: Execution\u2014WebAssembly 2.0 (Draft 2024-04-28) (2024). https:\/\/webassembly.github.io\/spec\/core\/exec\/index.html"},{"key":"5_CR53","unstructured":"WebAssembly: Index of instructions\u2014WebAssembly 2.0 (Draft 2024-04-28) (2024). https:\/\/webassembly.github.io\/spec\/core\/appendix\/index-instructions.html"},{"key":"5_CR54","unstructured":"WebAssembly: Roadmap\u2014WebAssembly (2024). https:\/\/webassembly.org\/roadmap\/"},{"key":"5_CR55","unstructured":"WebAssembly: Structure\u2014WebAssembly 2.0 (Draft 2024-04-28) (2024). https:\/\/webassembly.github.io\/spec\/core\/syntax\/index.html"},{"key":"5_CR56","unstructured":"WebAssembly: Webassembly core specification (2024). https:\/\/www.w3.org\/TR\/wasm-core-1\/"}],"container-title":["Lecture Notes in Computer Science","Information and Communications Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-95-3537-8_5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,18]],"date-time":"2026-08-18T05:24:01Z","timestamp":1787030641000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-95-3537-8_5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,20]]},"ISBN":["9789819535361","9789819535378"],"references-count":56,"URL":"https:\/\/doi.org\/10.1007\/978-981-95-3537-8_5","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,10,20]]},"assertion":[{"value":"20 October 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Information and Communications Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Nanjing","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"China","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 October 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31 October 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"icics2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.icics2025.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}