{"id":"https://openalex.org/W4391069661","doi":"https://doi.org/10.1016/j.cose.2024.103731","title":"Wasm-Mutate: Fast and effective binary diversification for WebAssembly","display_name":"Wasm-Mutate: Fast and effective binary diversification for WebAssembly","publication_year":2024,"publication_date":"2024-01-21","ids":{"openalex":"https://openalex.org/W4391069661","doi":"https://doi.org/10.1016/j.cose.2024.103731"},"language":"en","primary_location":{"id":"doi:10.1016/j.cose.2024.103731","doi":"https://doi.org/10.1016/j.cose.2024.103731","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2024.103731","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-b","cwts-core","dongbi-b","jufo-2","ki-jl-1","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.cose.2024.103731","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002876892","display_name":"Javier Cabrera-Arteaga","orcid":"https://orcid.org/0000-0001-9399-8647","observed_orcids":["https://orcid.org/0000-0001-9399-8647"]},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":true,"raw_author_name":"Javier Cabrera-Arteaga","raw_affiliation_strings":["KTH Royal Institute of Technology, Stockholm, Sweden"],"raw_orcid":"https://orcid.org/0000-0001-9399-8647","affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology, Stockholm, Sweden","institution_ids":["https://openalex.org/I86987016"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Nicholas Fitzgerald","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nicholas Fitzgerald","raw_affiliation_strings":["Fastly Inc., San Francisco, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fastly Inc., San Francisco, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027206285","display_name":"Martin Monperrus","orcid":"https://orcid.org/0000-0003-3505-3383","observed_orcids":["https://orcid.org/0000-0003-3505-3383"]},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Martin Monperrus","raw_affiliation_strings":["KTH Royal Institute of Technology, Stockholm, Sweden"],"raw_orcid":"https://orcid.org/0000-0003-3505-3383","affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology, Stockholm, Sweden","institution_ids":["https://openalex.org/I86987016"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5086536054","display_name":"Beno\u00eet Baudry","orcid":"https://orcid.org/0000-0002-4015-4640","observed_orcids":["https://orcid.org/0000-0002-4015-4640"]},"institutions":[{"id":"https://openalex.org/I86987016","display_name":"KTH Royal Institute of Technology","ror":"https://ror.org/026vcq606","country_code":"SE","type":"education","lineage":["https://openalex.org/I86987016"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Benoit Baudry","raw_affiliation_strings":["KTH Royal Institute of Technology, Stockholm, Sweden"],"raw_orcid":"https://orcid.org/0000-0002-4015-4640","affiliations":[{"raw_affiliation_string":"KTH Royal Institute of Technology, Stockholm, Sweden","institution_ids":["https://openalex.org/I86987016"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5002876892"],"corresponding_institution_ids":["https://openalex.org/I86987016"],"apc_list":{"value":3190,"currency":"USD","value_usd":3190},"apc_paid":{"value":3190,"currency":"USD","value_usd":3190},"fwci":1.7686,"has_fulltext":true,"cited_by_count":12,"citation_normalized_percentile":{"value":0.85322741,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"139","issue":null,"first_page":"103731","last_page":"103731"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/webassembly","display_name":"WebAssembly","score":0.9940000176429749},{"id":"https://openalex.org/keywords/e-graphs","display_name":"e-graphs","score":0.7039999961853027},{"id":"https://openalex.org/keywords/side-channel-attacks","display_name":"side-channel attacks","score":0.7289999723434448},{"id":"https://openalex.org/keywords/timing-attacks","display_name":"timing attacks","score":0.7210000157356262},{"id":"https://openalex.org/keywords/spectre","display_name":"Spectre","score":0.9330000281333923},{"id":"https://openalex.org/keywords/binary-obfuscation","display_name":"binary obfuscation","score":0.6399999856948853}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6755662560462952},{"id":"https://openalex.org/C180916674","wikidata":"https://www.wikidata.org/wiki/Q3711935","display_name":"Diversification (marketing strategy)","level":2,"score":0.5061644911766052},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.43632107973098755},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.18106767535209656},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.07273983955383301},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1016/j.cose.2024.103731","doi":"https://doi.org/10.1016/j.cose.2024.103731","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2024.103731","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-b","cwts-core","dongbi-b","jufo-2","ki-jl-1","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2309.07638","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2309.07638","pdf_url":"https://arxiv.org/pdf/2309.07638","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:DiVA.org:kth-342750","doi":null,"is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-342750","pdf_url":"https://kth.diva-portal.org/smash/get/diva2:1832730/FULLTEXT01","source":{"id":"https://openalex.org/S4306401559","display_name":"KTH Publication Database DiVA (KTH Royal Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I86987016","host_organization_name":"KTH Royal Institute of Technology","host_organization_lineage":["https://openalex.org/I86987016"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"},{"id":"doi:10.48550/arxiv.2309.07638","doi":"https://doi.org/10.48550/arxiv.2309.07638","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2309.07638","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.1016/j.cose.2024.103731","doi":"https://doi.org/10.1016/j.cose.2024.103731","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2024.103731","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-b","cwts-core","dongbi-b","jufo-2","ki-jl-1","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[{"display_name":"Life on land","score":0.4399999976158142,"id":"https://metadata.un.org/sdg/15"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":58,"referenced_works":["https://openalex.org/W164984320","https://openalex.org/W1567046609","https://openalex.org/W2062463502","https://openalex.org/W2086277109","https://openalex.org/W2131604959","https://openalex.org/W2134633067","https://openalex.org/W2136286495","https://openalex.org/W2164797883","https://openalex.org/W2170737051","https://openalex.org/W2625141509","https://openalex.org/W2701225458","https://openalex.org/W2775990858","https://openalex.org/W2781723315","https://openalex.org/W2912095354","https://openalex.org/W2912456980","https://openalex.org/W2912798479","https://openalex.org/W2913647445","https://openalex.org/W2916723483","https://openalex.org/W2950655732","https://openalex.org/W2951338155","https://openalex.org/W2966437945","https://openalex.org/W3007850870","https://openalex.org/W3014415287","https://openalex.org/W3033117380","https://openalex.org/W3033748891","https://openalex.org/W3099525000","https://openalex.org/W3104442698","https://openalex.org/W3117137355","https://openalex.org/W3160687652","https://openalex.org/W3166956180","https://openalex.org/W3194856199","https://openalex.org/W3214121473","https://openalex.org/W4200111862","https://openalex.org/W4213069590","https://openalex.org/W4224744482","https://openalex.org/W4231348362","https://openalex.org/W4232172926","https://openalex.org/W4236479186","https://openalex.org/W4238637948","https://openalex.org/W4243210229","https://openalex.org/W4254370894","https://openalex.org/W4255729962","https://openalex.org/W4281388447","https://openalex.org/W4285072894","https://openalex.org/W4292973460","https://openalex.org/W4293812875","https://openalex.org/W4299412096","https://openalex.org/W4300072878","https://openalex.org/W4311248665","https://openalex.org/W4376606583","https://openalex.org/W4376606648","https://openalex.org/W4377103576","https://openalex.org/W4380568681","https://openalex.org/W4387885560","https://openalex.org/W4390463471","https://openalex.org/W4400681692","https://openalex.org/W6676881949","https://openalex.org/W7074054808"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4389391504","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4301410663","https://openalex.org/W4312472185","https://openalex.org/W4396701345"],"abstract_inverted_index":{"WebAssembly":[0,55,64,121,129],"is":[1,9,86],"the":[2,68,138],"fourth":[3],"officially":[4],"endorsed":[5],"Web":[6],"language.":[7],"It":[8],"recognized":[10],"because":[11],"of":[12,67,115,117,137],"its":[13,21],"efficiency":[14],"and":[15,72,92,119],"design,":[16],"focused":[17],"on":[18,100],"security.":[19],"Yet,":[20],"swiftly":[22],"expanding":[23],"ecosystem":[24],"lacks":[25],"robust":[26],"software":[27],"diversification":[28,34],"systems.":[29],"We":[30,94],"introduce":[31],"Wasm-Mutate,":[32],"a":[33],"engine":[35,41],"specifically":[36],"designed":[37],"for":[38],"WebAssembly.":[39],"Our":[40,107],"meets":[42],"several":[43],"essential":[44],"criteria:":[45],"1)":[46],"To":[47,58],"quickly":[48],"generate":[49],"functionally":[50],"identical,":[51],"yet":[52],"behaviorally":[53],"diverse,":[54],"variants,":[56],"2)":[57],"be":[59],"universally":[60],"applicable":[61],"to":[62,88],"any":[63],"program,":[65],"irrespective":[66],"source":[69],"programming":[70],"language,":[71],"3)":[73],"Generated":[74],"variants":[75,122],"should":[76],"counter":[77],"side-channels.":[78],"By":[79],"leveraging":[80],"an":[81],"e-graph":[82],"data":[83],"structure,":[84],"Wasm-Mutate":[85,96,111,126],"implemented":[87],"meet":[89],"both":[90],"speed":[91],"efficacy.":[93],"evaluate":[95],"by":[97],"conducting":[98],"experiments":[99],"404":[101],"programs,":[102],"which":[103],"include":[104],"real-world":[105],"applications.":[106],"results":[108],"highlight":[109],"that":[110],"can":[112,127],"produce":[113],"tens":[114],"thousands":[116],"unique":[118],"efficient":[120],"within":[123],"minutes.":[124],"Significantly,":[125],"safeguard":[128],"binaries":[130],"against":[131],"timing":[132],"side-channel":[133],"attacks,":[134],"especially":[135],"those":[136],"Spectre":[139],"type.":[140]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":1}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2025-10-10T00:00:00"}