一句话:提出 WASim,通过分析模块级特征自动识别 WebAssembly 程序用途并分配标签。
WebAssembly 定义二进制代码格式与文本表示,但无论开发者经验如何,其文件都不易被人理解,导致分发的第三方 Wasm 模块通常只能被隐式信任,验证功能需大量精力。为此,作者开发了自动分类工具 WASim,通过分析模块级特征来识别 WebAssembly 程序的用途,并为模块分配用途标签,以帮助开发者理解二进制模块。摘要未报告具体评估指标,仅提供开源代码仓库与视频演示。
WebAssembly is a new programming language built for better performance in web applications. It defines a binary code format and a text representation for the code. At first glance, WebAssembly files are not easily understandable to human readers, regardless of the experience level. As a result, distributed third-party WebAssembly modules need to be implicitly trusted by developers as verifying the functionality requires significant effort. To this end, we develop an automated classification tool WASim for identifying the purpose of WebAssembly programs by analyzing features at the module-level. It assigns purpose labels to a module in order to assist developers in understanding the binary module. The code for WASim is available at https://github.com/WASimilarity/WASim and a video demo is available at https://youtu.be/usfYFIeTy0U.
DOI 原文 ·
@inproceedings{paperbot5971,
title = {WASim},
author = {Alan Romano and Weihang Wang},
booktitle = {ASE},
year = {2020},
doi = {10.1145/3324884.3415293}
}