{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T16:26:57Z","timestamp":1783096017822,"version":"3.54.6"},"publisher-location":"New York, NY, USA","reference-count":61,"publisher":"ACM","license":[{"start":{"date-parts":[[2025,4,22]],"date-time":"2025-04-22T00:00:00Z","timestamp":1745280000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/https:\/\/doi.org\/10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2409005,2321444"],"award-info":[{"award-number":["2409005,2321444"]}],"id":[{"id":"10.13039\/https:\/\/doi.org\/10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,4,28]]},"DOI":"10.1145\/3696410.3714622","type":"proceedings-article","created":{"date-parts":[[2025,5,5]],"date-time":"2025-05-05T16:42:02Z","timestamp":1746463322000},"page":"3311-3322","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["WBSan: WebAssembly Bug Detection for Sanitization and Binary-Only Fuzzing"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-7802-3003","authenticated-orcid":false,"given":"Xiao","family":"Wu","sequence":"first","affiliation":[{"name":"Hubei Key Laboratory of Distributed System Security, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-4088-1592","authenticated-orcid":false,"given":"Junzhou","family":"He","sequence":"additional","affiliation":[{"name":"University of Southern California, Los Angeles, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-4929-1478","authenticated-orcid":false,"given":"Liyan","family":"Huang","sequence":"additional","affiliation":[{"name":"University of Southern California, Los Angeles, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4536-3537","authenticated-orcid":false,"given":"Cai","family":"Fu","sequence":"additional","affiliation":[{"name":"Hubei Key Laboratory of Distributed System Security, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1175-4409","authenticated-orcid":false,"given":"Weihang","family":"Wang","sequence":"additional","affiliation":[{"name":"University of Southern California, Los Angeles, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,4,22]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"[n d.]. https:\/\/emscripten.org\/docs\/debugging\/Sanitizers.html."},{"key":"e_1_3_2_1_2_1","unstructured":"[n.d.]. https:\/\/github.com\/WasmSanitizer\/WasmSanitizer."},{"key":"e_1_3_2_1_3_1","unstructured":"[n.d.]. https:\/\/www.kernel.org\/doc\/html\/latest\/dev-tools\/kasan.html."},{"key":"e_1_3_2_1_4_1","unstructured":"[n.d.]. https:\/\/webassembly.github.io\/multi-memory\/core\/intro\/introduction.html."},{"key":"e_1_3_2_1_5_1","unstructured":"[n.d.]. https:\/\/github.com\/bytecodealliance\/wasmparser."},{"key":"e_1_3_2_1_6_1","unstructured":"[n.d.]. https:\/\/github.com\/alex-gutev\/wasm-encoder."},{"key":"e_1_3_2_1_7_1","unstructured":"[n.d.]. https:\/\/github.com\/libtom\/libtomcrypt.git."},{"key":"e_1_3_2_1_8_1","unstructured":"[n.d.]. https:\/\/github.com\/festvox\/flite."},{"key":"e_1_3_2_1_9_1","unstructured":"[n.d.]. https:\/\/github.com\/nodejs\/http-parser."},{"key":"e_1_3_2_1_10_1","unstructured":"[n.d.]. Binaryen. http:\/\/webassembly.github.io\/binaryen\/."},{"key":"e_1_3_2_1_11_1","unstructured":"[n.d.]. Clang C Language Family Frontend for LLVM. https:\/\/clang.llvm.org\/."},{"key":"e_1_3_2_1_12_1","unstructured":"[n.d.]. Libsndfile. https:\/\/github.com\/libsndfile\/libsndfile."},{"key":"e_1_3_2_1_13_1","unstructured":"[n.d.]. The LLVM Compiler Infrastructure Project. https:\/\/llvm.org\/."},{"key":"e_1_3_2_1_14_1","unstructured":"[n.d.]. The security of WebAssembly. https:\/\/webassembly.org\/docs\/security\/."},{"key":"e_1_3_2_1_15_1","unstructured":"[n.d.]. Undefined behavior sanitizer. https:\/\/clang.llvm.org\/docs\/UndefinedBehaviorSanitizer.html."},{"key":"e_1_3_2_1_16_1","unstructured":"[n.d.]. The WebAssembly Binary Toolkit. https:\/\/github.com\/WebAssembly\/wabt\/."},{"key":"e_1_3_2_1_17_1","volume-title":"Wasm-R3: Record-Reduce-Replay for Realistic and Standalone WebAssembly Benchmarks. arXiv preprint arXiv:2409.00708","author":"Baek Doehyun","year":"2024","unstructured":"Doehyun Baek, Jakob Getz, Yusung Sim, Daniel Lehmann, Ben L Titzer, Sukyoung Ryu, and Michael Pradel. 2024. Wasm-R3: Record-Reduce-Replay for Realistic and Standalone WebAssembly Benchmarks. arXiv preprint arXiv:2409.00708 (2024)."},{"key":"e_1_3_2_1_18_1","unstructured":"Adam Benali. 2022. An Initial Investigation of Neural Decompilation for WebAssembly."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/SANER56733.2023.00085"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102745"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/2338965.2336769"},{"key":"e_1_3_2_1_22_1","volume-title":"Proceed- ings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis. 703--715.","author":"Chen Weimin","unstructured":"Weimin Chen, Zihan Sun, Haoyu Wang, Xiapu Luo, Haipeng Cai, and Lei Wu. 2022. WASAI: uncovering vulnerabilities in Wasm smart contracts. In Proceed- ings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis. 703--715."},{"key":"e_1_3_2_1_23_1","volume-title":"MTSan: A Feasible and Practical Memory Sanitizer for Fuzzing COTS Binaries. USENIX Security Symposium'23","author":"Chen Xingman","year":"2023","unstructured":"Xingman Chen, Yinghao Shi, Zheyu Jiang, Yuan Li, Ruoyu Wang, Haixin Duan, Haoyu Wang, and Chao Zhang. 2023. MTSan: A Feasible and Practical Memory Sanitizer for Fuzzing COTS Binaries. USENIX Security Symposium'23 (2023)."},{"key":"e_1_3_2_1_24_1","unstructured":"Mingi Cho Dohyeon An Hoyong Jin and Taekyoung Kwon. [n. d.]. BoKASAN: Binary-only Kernel Address Sanitizer for Effective Kernel Fuzzing. ([n. d.])."},{"key":"e_1_3_2_1_25_1","volume-title":"RetroWrite: Statically Instrumenting COTS Binaries for Fuzzing and Sanitization. In 2020 IEEE Symposium on Security and Privacy (SP). IEEE","author":"Dinesh Sushant","year":"2020","unstructured":"Sushant Dinesh, Nathan Burow, Dongyan Xu, and Mathias Payer. 2020. RetroWrite: Statically Instrumenting COTS Binaries for Fuzzing and Sanitization. In 2020 IEEE Symposium on Security and Privacy (SP). IEEE, San Francisco, CA, USA, 1497--1511. https:\/\/ieeexplore.ieee.org\/document\/9152762\/"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3192366.3192388"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3192366.3192388"},{"key":"e_1_3_2_1_28_1","volume-title":"StackSight: Unveiling WebAssembly through Large Language Models and Neurosymbolic Chain-of-Thought Decompilation. arXiv preprint arXiv:2406.04568","author":"Fang Weike","year":"2024","unstructured":"Weike Fang, Zhejian Zhou, Junzhou He, and Weihang Wang. 2024. StackSight: Unveiling WebAssembly through Large Language Models and Neurosymbolic Chain-of-Thought Decompilation. arXiv preprint arXiv:2406.04568 (2024)."},{"key":"e_1_3_2_1_29_1","volume-title":"Daniele Cono D'Elia, and Leonardo Querzoni","author":"Fioraldi Andrea","year":"2020","unstructured":"Andrea Fioraldi, Daniele Cono D'Elia, and Leonardo Querzoni. 2020. Fuzzing binaries for memory safety errors with QASan. In 2020 IEEE Secure Development (SecDev). IEEE, 23--30."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/3062341.3062363"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3503921.3503924"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3650212.3685300"},{"key":"e_1_3_2_1_33_1","volume-title":"Eunomia: Enabling User-specified Fine-Grained Search in Symbolically Executing WebAssembly Binaries. arXiv preprint arXiv:2304.07204.","author":"He Ningyu","year":"2023","unstructured":"Ningyu He, Zhehao Zhao, Jikai Wang, Yubin Hu, Shengjian Guo, Haoyu Wang, Guangtai Liang, Ding Li, Xiangqun Chen, and Yao Guo. 2023. Eunomia: Enabling User-specified Fine-Grained Search in Symbolically Executing WebAssembly Binaries. arXiv preprint arXiv:2304.07204."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3442381.3450138"},{"key":"e_1_3_2_1_35_1","volume-title":"An evaluation of webassembly and ebpf as offloading mechanisms in the context of computational storage. arXiv preprint arXiv:2111.01947","author":"Huang Wenjun","year":"2021","unstructured":"Wenjun Huang and Marcus Paradies. 2021. An evaluation of webassembly and ebpf as offloading mechanisms in the context of computational storage. arXiv preprint arXiv:2111.01947 (2021)."},{"key":"e_1_3_2_1_36_1","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Lehmann Daniel","year":"2020","unstructured":"Daniel Lehmann, Johannes Kinder, and Michael Pradel. 2020. Everything old is new again: Binary security of {WebAssembly}. In 29th USENIX Security Symposium (USENIX Security 20). 217--234."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/3297858.3304068"},{"key":"e_1_3_2_1_38_1","volume-title":"Martin Toldam Torp, and Michael Pradel","author":"Lehmann Daniel","year":"2021","unstructured":"Daniel Lehmann, Martin Toldam Torp, and Michael Pradel. 2021. Fuzzm: Finding memory bugs through binary-only instrumentation and fuzzing of webassembly. arXiv preprint arXiv:2110.15433 (2021)."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM42981.2021.9488424"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3498361.3538922"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/3582016.3582053"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3368089.3417923"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24461"},{"key":"e_1_3_2_1_44_1","volume-title":"36th European Conference on Object-Oriented Programming (ECOOP","author":"Marques Filipe","year":"2022","unstructured":"Filipe Marques, Jos\u00e9 Fragoso Santos, Nuno Santos, and Pedro Ad\u00e3o. 2022. Concolic execution for webassembly. In 36th European Conference on Object-Oriented Programming (ECOOP 2022). Schloss-Dagstuhl-Leibniz Zentrum f\u00fcr Informatik."},{"key":"e_1_3_2_1_45_1","unstructured":"Matteo Basso. 2022. Awesome Wasm. https:\/\/v8.dev\/blog\/liftoff."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2024.3438119"},{"key":"e_1_3_2_1_47_1","unstructured":"Stefan Nagy Anh Nguyen-Tuong Jason D Hiser Jack W Davidson and Matthew Hicks. 2020. Breaking Through Binaries: Compiler-quality Instrumentation for Better Binary-only Fuzzing. (2020)."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/1250734.1250746"},{"key":"e_1_3_2_1_49_1","unstructured":"NIST. [n. d.]. Juliet Test Suite for C\/C 1.3. https:\/\/samate.nist.gov\/SARD\/testsuites\/112."},{"key":"e_1_3_2_1_50_1","volume-title":"Nomad: Cross-Platform Computational Offloading and Migration in Femtoclouds Using WebAssembly. In 2021 IEEE International Conference on Cloud Engineering (IC2E). IEEE, 168--178","author":"Nurul-Hoque Mohammed","year":"2021","unstructured":"Mohammed Nurul-Hoque and Khaled A Harras. 2021. Nomad: Cross-Platform Computational Offloading and Migration in Femtoclouds Using WebAssembly. In 2021 IEEE International Conference on Cloud Engineering (IC2E). IEEE, 168--178."},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE51524.2021.9678776"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3611643.3616311"},{"key":"e_1_3_2_1_53_1","unstructured":"Konstantin Serebryany Derek Bruening Alexander Potapenko and Dmitriy Vyukov. 2012. {AddressSanitizer}: A fast address sanity checker. In 2012 USENIX annual technical conference (USENIX ATC 12). 309--318."},{"key":"e_1_3_2_1_54_1","volume-title":"USENIX Annual Technical Conference, General Track. 17--30","author":"Seward Julian","year":"2005","unstructured":"Julian Seward and Nicholas Nethercote. 2005. Using Valgrind to Detect Undefined Value Errors with Bit-Precision.. In USENIX Annual Technical Conference, General Track. 17--30."},{"key":"e_1_3_2_1_55_1","volume-title":"2015 IEEE\/ACM International Symposium on Code Generation and Optimization (CGO). IEEE, 46--55","author":"Stepanov Evgeniy","year":"2015","unstructured":"Evgeniy Stepanov and Konstantin Serebryany. 2015. MemorySanitizer: fast detector of uninitialized memory use in C. In 2015 IEEE\/ACM International Symposium on Code Generation and Optimization (CGO). IEEE, 46--55."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/3477314.3507308"},{"key":"e_1_3_2_1_57_1","volume-title":"WANA: Symbolic execution of wasm bytecode for cross-platform smart contract vulnerability detection. arXiv preprint arXiv:2007.15510","author":"Wang Dong","year":"2020","unstructured":"Dong Wang, Bo Jiang, and WK Chan. 2020. WANA: Symbolic execution of wasm bytecode for cross-platform smart contract vulnerability detection. arXiv preprint arXiv:2007.15510 (2020)."},{"key":"e_1_3_2_1_58_1","unstructured":"wasmCloud Project Authors. 2022. WasmCloud. https:\/\/wasmcloud.com\/."},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/3316415"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1145\/2048147.2048224"},{"key":"e_1_3_2_1_61_1","volume-title":"VM matters: a comparison of WASM VMS and EVMS in the performance of blockchain smart contracts. arXiv preprint arXiv:2012.01032","author":"Zheng Shuyu","year":"2020","unstructured":"Shuyu Zheng, Haoyu Wang, Lei Wu, Gang Huang, and Xuanzhe Liu. 2020. VM matters: a comparison of WASM VMS and EVMS in the performance of blockchain smart contracts. arXiv preprint arXiv:2012.01032 (2020)."}],"event":{"name":"WWW '25: The ACM Web Conference 2025","location":"Sydney NSW Australia","acronym":"WWW '25","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web"]},"container-title":["Proceedings of the ACM on Web Conference 2025"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3696410.3714622","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3696410.3714622","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T01:18:56Z","timestamp":1750295936000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3696410.3714622"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,4,22]]},"references-count":61,"alternative-id":["10.1145\/3696410.3714622","10.1145\/3696410"],"URL":"https:\/\/doi.org\/10.1145\/3696410.3714622","relation":{},"subject":[],"published":{"date-parts":[[2025,4,22]]},"assertion":[{"value":"2025-04-22","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}