{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,24]],"date-time":"2026-08-24T09:18:29Z","timestamp":1787563109723,"version":"build-2736575974"},"reference-count":130,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,5]]},"DOI":"10.1109\/sp46215.2023.10179357","type":"proceedings-article","created":{"date-parts":[[2023,7,21]],"date-time":"2023-07-21T13:18:15Z","timestamp":1689945495000},"page":"2940-2955","source":"Crossref","is-referenced-by-count":24,"title":["WaVe: a verifiably secure WebAssembly sandboxing runtime"],"prefix":"10.1109","author":[{"given":"Evan","family":"Johnson","sequence":"first","affiliation":[{"name":"UC San Diego"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Evan","family":"Laufer","sequence":"additional","affiliation":[{"name":"Stanford"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zijie","family":"Zhao","sequence":"additional","affiliation":[{"name":"UIUC"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dan","family":"Gohman","sequence":"additional","affiliation":[{"name":"Fastly Labs"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shravan","family":"Narayan","sequence":"additional","affiliation":[{"name":"UC San Diego"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Stefan","family":"Savage","sequence":"additional","affiliation":[{"name":"UC San Diego"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Deian","family":"Stefan","sequence":"additional","affiliation":[{"name":"UC San Diego"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fraser","family":"Brown","sequence":"additional","affiliation":[{"name":"CMU"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3140587.3062363"},{"key":"ref2","article-title":"WebAssembly"},{"key":"ref3","article-title":"Announcing Lucet: Fastly\u2019s native WebAssembly compiler and runtime","author":"Hickey","year":"2019"},{"key":"ref4","article-title":"WebAssembly on Cloudflare workers","author":"Varda","year":"2018"},{"key":"ref5","article-title":"WebAssembly micro runtime","year":"2021"},{"key":"ref6","article-title":"Polkadot\u2019s Gavin Wood: WebAssembly is the future of smart contracts, but \u2018legacy\u2019 EVM is right now","author":"Dale","year":"2021"},{"key":"ref7","article-title":"Retrofitting fine grain isolation in the Firefox renderer","volume-title":"USENIX Sec","author":"Narayan"},{"key":"ref8","article-title":"Securing Firefox with WebAssembly","author":"Froyd","year":"2020"},{"key":"ref9","article-title":"Envoy proxy","year":"2022"},{"key":"ref10","article-title":"cargo fuzz targets for Wasmtime","year":"2022"},{"key":"ref11","article-title":"A journey into fuzzing WebAssembly virtual machines","author":"Ventuzelo","year":"2022"},{"key":"ref12","article-title":"\u0414oBep \u1d19\u0301\u0419, HO npoBep \u1d19\u0301\u0419: SFI safety for native-compiled Wasm","volume-title":"NDSS","author":"Johnson","year":"2021"},{"key":"ref13","article-title":"Provably-safe multilingual software sandboxing using WebAssembly","volume-title":"USENIX Sec","author":"Bosamiya"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3167082"},{"key":"ref15","article-title":"Use after free in lucet","year":"2021"},{"key":"ref16","article-title":"Wasmtime security advisories","author":"Alliance","year":"2022"},{"key":"ref17","article-title":"WebAssembly system interface"},{"issue":"7","key":"ref18","article-title":"POSIX.1-2008, IEEE 1003.1-2008","year":"2008","journal-title":"The Open Group Base Specifications"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2815400.2815411"},{"key":"ref20","article-title":"Fix rights check for fd_pread and fd_pwrite","author":"Konka","year":"2019"},{"key":"ref21","article-title":"wasi-common: UNC paths are not handled correctly on windows","author":"Hickey","year":"2021"},{"key":"ref22","article-title":"Appending to file does not work","author":"Persaud","year":"2019"},{"key":"ref23","article-title":"Symlink check makes WASI unusable under wine","year":"2020"},{"key":"ref24","article-title":"Opening files with O_TRUNC does not truncate them on Windows","year":"2020"},{"key":"ref25","article-title":"Add more operand stack overflow checks for fastinterp","author":"Huang","year":"2022"},{"key":"ref26","article-title":"Traps and pitfalls: Practical problems in system call interposition based security tools","volume-title":"NDSS","author":"Garfinkel"},{"key":"ref27","article-title":"Native Client security contest archive","year":"2009"},{"key":"ref28","article-title":"PKU pitfalls: Attacks on PKU-based memory isolation systems","volume-title":"USENIX Sec","author":"Connor"},{"key":"ref29","article-title":"WASI sockets proposal","year":"2022"},{"key":"ref30","article-title":"prusti-dev"},{"key":"ref31","article-title":"Wasmtime","year":"2021"},{"key":"ref32","article-title":"lmbench: Portable tools for performance analysis","volume-title":"USENIX ATC","author":"McVoy"},{"key":"ref33","volume-title":"SQLite","author":"Owens","year":"2010"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/1186736.1186737"},{"key":"ref35","article-title":"Standardizing WASI: A system interface to run WebAssembly outside the web","author":"Clark","year":"2019"},{"key":"ref36","article-title":"Issue 53: SRPC Shared Memory Infoleak \/ Memory corruption"},{"key":"ref37","article-title":"CVE-2022-28990 - wasm3 heap overflow","year":"2022"},{"key":"ref38","article-title":"Potential bug in WAMR\u2019s wasm_exec_env_alloc_wasm_frame","author":"Stefan","year":"2022","journal-title":"Personal communication with WAMR team"},{"key":"ref39","article-title":"potential overflow in get_utf8_string","author":"d\u2019Antras","year":"2021","journal-title":"Personal communication with the Wasmer security team"},{"key":"ref40","article-title":"Fix potential integer overflows in WasmPtr memory access methods","author":"Stefan","year":"2022"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.25"},{"key":"ref42","article-title":"UVWasi","year":"2022"},{"key":"ref43","article-title":"feat(wasi): add rename for a directory + fix remove_dir","author":"Coenen","year":"2021"},{"key":"ref44","article-title":"Wasmer - universal WebAssembly runtime","year":"2019"},{"key":"ref45","article-title":"Node.js","year":"2019"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-17184-1_17"},{"key":"ref47","article-title":"Posix readv man page"},{"key":"ref48","article-title":"Multiple instances of the global Linux namespaces","volume-title":"Proceedings of the Linux Symposium","volume":"1","author":"Biederman"},{"key":"ref49","article-title":"Jails: Confining the omnipotent root","volume-title":"SANE","author":"Kamp"},{"key":"ref50","article-title":"WASI libc: a libc for WebAssembly programs built on top of WASI system calls"},{"key":"ref51","doi-asserted-by":"crossref","DOI":"10.1145\/2093548.2093572","article-title":"Capsicum: Practical capabilities for UNIX","volume-title":"USENIX Sec","author":"Watson"},{"key":"ref52","article-title":"Posix path resolution specification"},{"key":"ref53","article-title":"Posix openat specification"},{"key":"ref54","article-title":"WebAssembly core specification"},{"key":"ref55","article-title":"Prusti bitvectors pr","year":"2022"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/1988042.1988046"},{"key":"ref57","article-title":"google\/afl","year":"2013"},{"key":"ref58","article-title":"Wasmer bugs submitted to security mailing list","author":"Zhao","year":"2021"},{"key":"ref59","article-title":"posix_fallocate truncates file on macos #2973","year":"2021"},{"key":"ref60","article-title":"Double open the same file, close one fd, weird offset issue #3188","year":"2021"},{"key":"ref61","article-title":"wasm2c: Convert wasm files to c source and header","year":"2021"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1561\/9781680833454"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/2038642.2038687"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/2345156.2254111"},{"key":"ref65","article-title":"Evaluating SFI for a CISC architecture","volume-title":"USENIX Sec","author":"McCamant"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-17184-1_18"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2014.10"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/MARK.1979.8817256"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/2517349.2522712"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/1809028.1806610"},{"key":"ref71","article-title":"CertiKOS: An extensible architecture for building certified concurrent OS kernels","volume-title":"OSDI","author":"Gu"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132748"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/2560537"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1145\/1243418.1243424"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00049"},{"key":"ref76","article-title":"\u00fcberSpark: Enforcing verifiable object abstractions for automated compositional security analysis of a hypervisor","volume-title":"USENIX Sec","author":"Vasudevan"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132782"},{"issue":"2","key":"ref78","doi-asserted-by":"crossref","DOI":"10.1145\/2980024.2872404","article-title":"Cogent: Verifying high-assurance file system implementations","volume":"44","author":"Amani","year":"2016","journal-title":"ACM SIGARCH Computer Architecture News"},{"issue":"9","key":"ref79","article-title":"Refinement through restraint: Bringing down the cost of verification","volume":"51","author":"O\u2019Connor","year":"2016","journal-title":"ACM SIGPLAN Notices"},{"key":"ref80","article-title":"Proving confidentiality in a file system using disksec","volume-title":"OSDI","author":"Ileri"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1145\/2815400.2815402"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1145\/3051092"},{"key":"ref83","article-title":"Push-button verification of file systems via crash refinement","volume-title":"OSDI","author":"Sigurbjarnarson"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132776"},{"key":"ref85","article-title":"GoJournal: a verified, concurrent, crash-safe journaling system","volume-title":"OSDI","author":"Chajed"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1145\/3341301.3359632"},{"key":"ref87","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-319-29613-5_5","article-title":"Inside a verified flash file system: transactions and garbage collection","volume-title":"VSSTE","author":"Ernst"},{"key":"ref88","article-title":"A verified POSIX-compliant flash file system - modular verification technology & crash tolerance","author":"Ernst","year":"2017"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-43652-3_2"},{"key":"ref90","article-title":"Besfs: A POSIX filesystem for enclaves with a mechanized safety proof","volume-title":"USENIX Sec","author":"Shinde"},{"key":"ref91","article-title":"Robust composition: Towards a unified approach to access control and concurrency control","volume-title":"Ph.D. dissertation","author":"Miller","year":"2006"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.22"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1145\/3133913"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1145\/3371100"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1145\/2893177"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866331"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33167-1_48"},{"issue":"1","key":"ref98","doi-asserted-by":"crossref","DOI":"10.1145\/3093337.3037725","article-title":"CHERI JNI: Sinking the Java security model into the C","volume":"45","author":"Chisnall","year":"2017","journal-title":"ACM SIGARCH Computer Architecture News"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1145\/2627393.2627396"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45744-4_21"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23384"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-007-0031-0"},{"key":"ref103","article-title":"A seccomp overview","author":"Edge","year":"2015"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1145\/3428203"},{"key":"ref105","article-title":"Graphene-SGX: A practical library OS for unmodified applications on SGX","volume-title":"USENIX ATC","author":"Tsai"},{"key":"ref106","article-title":"SCONE: Secure Linux containers with Intel SGX","volume-title":"OSDI","author":"Arnautov"},{"key":"ref107","article-title":"SGX-LKL: Securing the host OS interface for trusted execution","author":"Priebe","year":"2019"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1145\/2799647"},{"issue":"1","key":"ref109","doi-asserted-by":"crossref","DOI":"10.1145\/2490301.2451145","article-title":"Iago attacks: Why the system call API is a bad untrusted RPC interface","volume":"41","author":"Checkoway","year":"2013","journal-title":"ACM SIGARCH Computer Architecture News"},{"key":"ref110","article-title":"Towards application security on untrusted operating systems","volume-title":"HotSec","author":"Ports"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1145\/1064978.1065019"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-88806-0_16"},{"key":"ref113","article-title":"An empirical security study of the native code in the JDK","volume-title":"USENIX Sec","author":"Tan"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1145\/1390630.1390645"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.68"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2019.2946563"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1145\/3512345"},{"key":"ref118","article-title":"Fuzzing with code fragments","volume-title":"USENIX Sec","author":"Holler"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23263"},{"key":"ref120","article-title":"Montage: A neural network language Model-Guided JavaScript engine fuzzer","volume-title":"USENIX Sec","author":"Lee"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.23096"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484811"},{"key":"ref123","article-title":"syzkaller - kernel fuzzer"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00035"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1145\/3341301.3359662"},{"key":"ref126","article-title":"Explode: a lightweight, general system for finding serious storage system errors","volume-title":"OSDI","author":"Yang"},{"key":"ref127","article-title":"WASI multi-threading and atomics","year":"2021"},{"key":"ref128","article-title":"Linux kernel ELF core dump privilege elevation","year":"2005"},{"key":"ref129","article-title":"In the lands of corrupted elves: Breaking ELF software with Melkor fuzzer","year":"2014"},{"key":"ref130","article-title":"CVE-2017-16997","year":"2017"}],"event":{"name":"2023 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2023,5,21]]},"end":{"date-parts":[[2023,5,25]]}},"container-title":["2023 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10179215\/10179280\/10179357.pdf?arnumber=10179357","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,12]],"date-time":"2026-08-12T19:12:46Z","timestamp":1786561966000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10179357\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,5]]},"references-count":130,"URL":"https:\/\/doi.org\/10.1109\/sp46215.2023.10179357","relation":{},"subject":[],"published":{"date-parts":[[2023,5]]}}}