{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T08:19:55Z","timestamp":1783153195051,"version":"3.54.6"},"publisher-location":"New York, NY, USA","reference-count":57,"publisher":"ACM","funder":[{"name":"National Natural Science Foundation of China","award":["62425205"],"award-info":[{"award-number":["62425205"]}]},{"name":"National Natural Science Foundation of China","award":["62272224"],"award-info":[{"award-number":["62272224"]}]},{"name":"Yangtze River Delta Science and Technology Innovation Community Joint Research Project","award":["2024CSJZN00400"],"award-info":[{"award-number":["2024CSJZN00400"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,4,13]]},"DOI":"10.1145\/3774904.3792297","type":"proceedings-article","created":{"date-parts":[[2026,4,9]],"date-time":"2026-04-09T21:54:34Z","timestamp":1775771674000},"page":"2812-2823","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["WAMO: Toward Secure Browser Inference via Web Model Obfuscation in WebAssembly"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-5869-882X","authenticated-orcid":false,"given":"Yitong","family":"Wang","sequence":"first","affiliation":[{"name":"Nanjing University of Aeronautics and Astronautics, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9926-9442","authenticated-orcid":false,"given":"Pengfei","family":"Yu","sequence":"additional","affiliation":[{"name":"Nanjing University of Aeronautics and Astronautics, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7912-027X","authenticated-orcid":false,"given":"Hao","family":"Han","sequence":"additional","affiliation":[{"name":"Nanjing University of Aeronautics and Astronautics, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3989-1520","authenticated-orcid":false,"given":"Jingjing","family":"Gu","sequence":"additional","affiliation":[{"name":"Nanjing University of Aeronautics and Astronautics, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3388-7544","authenticated-orcid":false,"given":"Fengyuan","family":"Xu","sequence":"additional","affiliation":[{"name":"Nanjing University, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0070-1707","authenticated-orcid":false,"given":"Xinyi","family":"Huang","sequence":"additional","affiliation":[{"name":"Nanjing University of Aeronautics and Astronautics, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,4,12]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"[n.d.]. Tigress: A Diversifying Virtualizer\/Obfuscator for C. https:\/\/tigress.wtf. Accessed: 2025--10-07."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.36647\/CIML\/06.01.A006"},{"key":"e_1_3_2_1_3_1","article-title":"Software complexity metrics: a survey","volume":"3","author":"Babu P Chitti","year":"2013","unstructured":"P Chitti Babu, A Narasimha Prasad, and D Sudhakar. 2013. Software complexity metrics: a survey. International Journal 3, 8 (2013).","journal-title":"International Journal"},{"key":"e_1_3_2_1_4_1","volume-title":"RSA Secured Web Based Steganography Employing HTML Space Codes and Compression Technique. In 2019 International Conference on Intelligent Computing and Control Systems (ICCS). IEEE, 865--868","author":"Bajaj Ishita","year":"2019","unstructured":"Ishita Bajaj and RK Aggarwal. 2019. RSA Secured Web Based Steganography Employing HTML Space Codes and Compression Technique. In 2019 International Conference on Intelligent Computing and Control Systems (ICCS). IEEE, 865--868."},{"key":"e_1_3_2_1_5_1","unstructured":"Brain.js Contributors. 2023. Brain.js: Neural networks in JavaScript. https:\/\/github.com\/BrainJS\/brain.js Accessed: 2025-09--11."},{"key":"e_1_3_2_1_6_1","unstructured":"Bytecode Alliance \/ Wasmtime. 2025. Security \u2014 Wasmtime Documentation. https:\/\/docs.wasmtime.dev\/security.html Accessed: 2025-09--11."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.103731"},{"key":"e_1_3_2_1_8_1","volume-title":"WASMixer: Binary Obfuscation for WebAssembly. In European Symposium on Research in Computer Security. Springer, 88--109","author":"Cao Shangtong","year":"2024","unstructured":"Shangtong Cao, Ningyu He, Yao Guo, and HaoyuWang. 2024. WASMixer: Binary Obfuscation for WebAssembly. In European Symposium on Research in Computer Security. Springer, 88--109."},{"key":"e_1_3_2_1_9_1","volume-title":"Faster cryptonets: Leveraging sparsity for real-world encrypted inference. arXiv preprint arXiv:1811.09953","author":"Chou Edward","year":"2018","unstructured":"Edward Chou, Josh Beal, Daniel Levy, Serena Yeung, Albert Haque, and Li Fei-Fei. 2018. Faster cryptonets: Leveraging sparsity for real-world encrypted inference. arXiv preprint arXiv:1811.09953 (2018)."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1016\/0167-4048(93)90054-9"},{"key":"e_1_3_2_1_11_1","unstructured":"Christian Collberg Clark Thomborson and Douglas Low. 1997. A taxonomy of obfuscating transformations."},{"key":"e_1_3_2_1_12_1","volume-title":"Thinh Hung Truong, and Dat Quoc Nguyen","author":"Dao Mai Hoang","year":"2021","unstructured":"Mai Hoang Dao, Thinh Hung Truong, and Dat Quoc Nguyen. 2021. Intent detection and slot filling for Vietnamese. arXiv preprint arXiv:2104.02021 (2021)."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"crossref","unstructured":"Zakir Durumeric Zane Ma Drew Springall Richard Barnes Nick Sullivan Elie Bursztein Michael D Bailey J Alex Halderman and Vern Paxson. 2017. The Security Impact of HTTPS Interception.. In NDSS.","DOI":"10.14722\/ndss.2017.23456"},{"key":"e_1_3_2_1_14_1","unstructured":"Fyrd. 2025. Can I use... Support tables for HTML5 CSS3 etc. https:\/\/caniuse.com\/'search=WebAssembly. Accessed: 2025-05--24."},{"key":"e_1_3_2_1_15_1","first-page":"2191","article-title":"Edge-cloud computing for Internet of Things data analytics: Embedding intelligence in the edge with deep learning","volume":"17","author":"Ghosh Ananda Mohon","year":"2020","unstructured":"Ananda Mohon Ghosh and Katarina Grolinger. 2020. Edge-cloud computing for Internet of Things data analytics: Embedding intelligence in the edge with deep learning. IEEE Transactions on Industrial Informatics 17, 3 (2020), 2191--2200.","journal-title":"IEEE Transactions on Industrial Informatics"},{"key":"e_1_3_2_1_16_1","volume-title":"International conference on machine learning. PMLR, 201--210","author":"Gilad-Bachrach Ran","year":"2016","unstructured":"Ran Gilad-Bachrach, Nathan Dowlin, Kim Laine, Kristin Lauter, Michael Naehrig, and John Wernsing. 2016. Cryptonets: Applying neural networks to encrypted data with high throughput and accuracy. In International conference on machine learning. PMLR, 201--210."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDIS.2018.00032"},{"key":"e_1_3_2_1_18_1","unstructured":"Google XNNPACK Team. 2025. XNNPACK Test README. https:\/\/chromium.googlesource.com\/external\/github.com\/google\/XNNPACK\/%2B\/refs\/heads\/upstream\/test_272573034\/README.md. Accessed: 2025-05--24."},{"key":"e_1_3_2_1_19_1","volume-title":"Elements of Software Science (Operating and programming systems series)","author":"Halstead Maurice H","unstructured":"Maurice H Halstead. 1977. Elements of Software Science (Operating and programming systems series). Elsevier Science Inc."},{"key":"e_1_3_2_1_20_1","volume-title":"Cryptic Bytes: WebAssembly Obfuscation for Evading Cryptojacking Detection. arXiv preprint arXiv:2403.15197","author":"Harnes H\u00e5kon","year":"2024","unstructured":"H\u00e5kon Harnes and Donn Morrison. 2024. Cryptic Bytes: WebAssembly Obfuscation for Evading Cryptojacking Detection. arXiv preprint arXiv:2403.15197 (2024)."},{"key":"e_1_3_2_1_21_1","volume-title":"Cryptic Bytes: WebAssembly Obfuscation for Evading Cryptojacking Detection. arXiv preprint arXiv:2403.15197","author":"Harnes H\u00e5kon","year":"2024","unstructured":"H\u00e5kon Harnes and Donn Morrison. 2024. Cryptic Bytes: WebAssembly Obfuscation for Evading Cryptojacking Detection. arXiv preprint arXiv:2403.15197 (2024)."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSR59073.2023.00018"},{"key":"e_1_3_2_1_23_1","unstructured":"Martin Heller. 2020. How to use TensorFlow in your browser. https:\/\/www.infoworld.com\/article\/2259548\/how-to-use-tensorflow-inyour-browser.html. Accessed: 2025-05--24."},{"key":"e_1_3_2_1_24_1","volume-title":"Cryptodl: Deep neural networks over encrypted data. arXiv preprint arXiv:1711.05189","author":"Hesamifard Ehsan","year":"2017","unstructured":"Ehsan Hesamifard, Hassan Takabi, and Mehdi Ghasemi. 2017. Cryptodl: Deep neural networks over encrypted data. arXiv preprint arXiv:1711.05189 (2017)."},{"key":"e_1_3_2_1_25_1","unstructured":"inSpace. n.d.. inSpace. https:\/\/inspace.chat\/ Accessed: 2025-09--11."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.00085"},{"key":"e_1_3_2_1_27_1","unstructured":"Hardik Kundariya. 2025. 10 Top Node.js Libraries and Tools For Machine Learning. https:\/\/www.corbado.com\/blog\/10-top-nodejs-libraries-machine-learning. Accessed: 2025-05--24."},{"key":"e_1_3_2_1_28_1","volume-title":"On Security Weaknesses and Vulnerabilities in Deep Learning Systems","author":"Lai Zhongzheng","year":"2024","unstructured":"Zhongzheng Lai, Huaming Chen, Ruoxi Sun, Yu Zhang, Minhui Xue, and Dong Yuan. 2024. On Security Weaknesses and Vulnerabilities in Deep Learning Systems. IEEE Transactions on Dependable and Secure Computing (2024)."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2019.00020"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948149"},{"key":"e_1_3_2_1_31_1","unstructured":"Maybelline New York. n.d.. Virtual Try-On Makeup Tools. https:\/\/www.maybelline.com\/virtual-try-on-makeup-tools Accessed: 2025-09--11."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1976.233837"},{"key":"e_1_3_2_1_33_1","unstructured":"MDN Contributors. 2023. Compiling from Rust to WebAssembly. https:\/\/developer.mozilla.org\/en-US\/docs\/WebAssembly\/Rust_to_wasm. Accessed: 2025-05--24."},{"key":"e_1_3_2_1_34_1","unstructured":"Microsoft. 2023. ONNX Runtime Web Documentation. https:\/\/onnxruntime.ai\/docs\/api\/js\/ Accessed: 2025-09--11."},{"key":"e_1_3_2_1_35_1","unstructured":"Microsoft Open Source Team. 2021. ONNX RuntimeWeb: Running your machine learning model in the browser. https:\/\/opensource.microsoft.com\/blog\/2021\/09\/02\/onnx-runtime-web-running-your-machine-learning-model-in-browser\/. Accessed: 2025-05--24."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/3287560.3287562"},{"key":"e_1_3_2_1_37_1","volume-title":"Manticore: A User-Friendly Symbolic Execution Framework for Binaries and Smart Contracts. https:\/\/github.com\/trailofbits\/manticore Accessed: 2025--10-08.","author":"Bits Trail","year":"2019","unstructured":"Trail of Bits. 2019. Manticore: A User-Friendly Symbolic Execution Framework for Binaries and Smart Contracts. https:\/\/github.com\/trailofbits\/manticore Accessed: 2025--10-08."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00509"},{"key":"e_1_3_2_1_39_1","unstructured":"Stack Overflow. 2020. How to protect (obfuscate\/DRM) trained model weights in TensorFlow.js? https:\/\/stackoverflow.com\/q\/56919400."},{"key":"e_1_3_2_1_40_1","unstructured":"PKU-ASAL. 2025. SeeWasm: A Symbolic Execution Engine for WebAssembly Binaries. https:\/\/github.com\/PKU-ASAL\/SeeWasm Accessed: 2025--10-08."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.3390\/jsan13040044"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833743"},{"key":"e_1_3_2_1_43_1","first-page":"309","article-title":"Tensorflow. js: Machine learning for the web and beyond","volume":"1","author":"Smilkov Daniel","year":"2019","unstructured":"Daniel Smilkov, Nikhil Thorat, Yannick Assogba, Charles Nicholson, Nick Kreeger, Ping Yu, Shanqing Cai, Eric Nielsen, David Soegel, Stan Bileschi, et al. 2019. Tensorflow. js: Machine learning for the web and beyond. Proceedings of Machine Learning and Systems 1 (2019), 309--321.","journal-title":"Proceedings of Machine Learning and Systems"},{"key":"e_1_3_2_1_44_1","first-page":"309","article-title":"Tensorflow. js: Machine learning for the web and beyond","volume":"1","author":"Smilkov Daniel","year":"2019","unstructured":"Daniel Smilkov, Nikhil Thorat, Yannick Assogba, Charles Nicholson, Nick Kreeger, Ping Yu, Shanqing Cai, Eric Nielsen, David Soegel, Stan Bileschi, et al. 2019. Tensorflow. js: Machine learning for the web and beyond. Proceedings of Machine Learning and Systems 1 (2019), 309--321.","journal-title":"Proceedings of Machine Learning and Systems"},{"key":"e_1_3_2_1_45_1","unstructured":"TinyGo Contributors. 2023. WebAssembly Guide. https:\/\/tinygo.org\/docs\/guides\/webassembly\/. Accessed: 2025-05--24."},{"key":"e_1_3_2_1_46_1","volume-title":"25th USENIX security symposium (USENIX Security 16). 601--618.","author":"Tram\u00e8r Florian","unstructured":"Florian Tram\u00e8r, Fan Zhang, Ari Juels, Michael K Reiter, and Thomas Ristenpart. 2016. Stealing machine learning models via prediction {APIs}. In 25th USENIX security symposium (USENIX Security 16). 601--618."},{"key":"e_1_3_2_1_47_1","volume-title":"25th USENIX security symposium (USENIX Security 16). 601--618.","author":"Tram\u00e8r Florian","unstructured":"Florian Tram\u00e8r, Fan Zhang, Ari Juels, Michael K Reiter, and Thomas Ristenpart. 2016. Stealing machine learning models via prediction {APIs}. In 25th USENIX security symposium (USENIX Security 16). 601--618."},{"key":"e_1_3_2_1_48_1","unstructured":"TVM Community. 2020. Compiling machine learning to WebAssembly and WebGPU. https:\/\/tvm.apache.org\/2020\/05\/14\/compiling-machine-learning-towebassembly-and-webgpu. Accessed: 2025-05--24."},{"key":"e_1_3_2_1_49_1","volume-title":"Artificial intelligence in web development: Enhancing automation, personalization, and decision-making. Artificial intelligence 4, 1","author":"Upadhyaya Nitesh","year":"2024","unstructured":"Nitesh Upadhyaya. 2024. Artificial intelligence in web development: Enhancing automation, personalization, and decision-making. Artificial intelligence 4, 1 (2024), 534--540."},{"key":"e_1_3_2_1_50_1","unstructured":"Ronny Votel and Na Li. 2021. Next-Generation Pose Detection with MoveNet and TensorFlow.js. https:\/\/blog.tensorflow.org\/2021\/05\/next-generation-posedetection-with-movenet-and-tensorflowjs.html Accessed: 2025-09--11."},{"key":"e_1_3_2_1_51_1","unstructured":"WABT Contributors. 2023. wasm2wat tool documentation. https:\/\/webassembly.github.io\/wabt\/doc\/wasm2wat.1.html. Accessed: 2025-05--24."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3688843"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/3688843"},{"key":"e_1_3_2_1_54_1","volume-title":"Richard E Turner, Richard G Baraniuk, Craig Barton, Simon Peyton Jones, et al.","author":"Lamb Angus","year":"2020","unstructured":"ZichaoWang, Angus Lamb, Evgeny Saveliev, Pashmina Cameron, Yordan Zaykov, Jos\u00e9 Miguel Hern\u00e1ndez-Lobato, Richard E Turner, Richard G Baraniuk, Craig Barton, Simon Peyton Jones, et al. 2020. Instructions and guide for diagnostic questions: The neurips 2020 education challenge. arXiv preprint arXiv:2007.12061 (2020)."},{"key":"e_1_3_2_1_55_1","volume-title":"Security risks in deep learning implementations. In 2018 IEEE Security and privacy workshops (SPW)","author":"Xiao Qixue","unstructured":"Qixue Xiao, Kang Li, Deyue Zhang, and Weilin Xu. 2018. Security risks in deep learning implementations. In 2018 IEEE Security and privacy workshops (SPW). IEEE, 123--128."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/2048147.2048224"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3246766"}],"event":{"name":"WWW '26: The ACM Web Conference 2026","location":"Dubai United Arab Emirates","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web"]},"container-title":["Proceedings of the ACM Web Conference 2026"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3774904.3792297","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T08:02:28Z","timestamp":1783152148000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3774904.3792297"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,12]]},"references-count":57,"alternative-id":["10.1145\/3774904.3792297","10.1145\/3774904"],"URL":"https:\/\/doi.org\/10.1145\/3774904.3792297","relation":{},"subject":[],"published":{"date-parts":[[2026,4,12]]},"assertion":[{"value":"2026-04-12","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}