{"id":"https://openalex.org/W4288057729","doi":"https://doi.org/10.1109/sp46214.2022.9833626","title":"Wobfuscator: Obfuscating JavaScript Malware via Opportunistic Translation to WebAssembly","display_name":"Wobfuscator: Obfuscating JavaScript Malware via Opportunistic Translation to WebAssembly","publication_year":2022,"publication_date":"2022-05-01","ids":{"openalex":"https://openalex.org/W4288057729","doi":"https://doi.org/10.1109/sp46214.2022.9833626"},"language":"en","primary_location":{"id":"doi:10.1109/sp46214.2022.9833626","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46214.2022.9833626","pdf_url":null,"source":{"id":"https://openalex.org/S4363606603","display_name":"2022 IEEE Symposium on Security and Privacy (SP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070189701","display_name":"Alan Romano","orcid":"https://orcid.org/0000-0002-4467-2859"},"institutions":[{"id":"https://openalex.org/I63190737","display_name":"University at Buffalo, State University of New York","ror":"https://ror.org/01y64my43","country_code":"US","type":"education","lineage":["https://openalex.org/I63190737"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alan Romano","raw_affiliation_strings":["University at Buffalo, SUNY Buffalo,United States","University at Buffalo, SUNY Buffalo, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University at Buffalo, SUNY Buffalo,United States","institution_ids":["https://openalex.org/I63190737"]},{"raw_affiliation_string":"University at Buffalo, SUNY Buffalo, United States","institution_ids":["https://openalex.org/I63190737"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032121327","display_name":"Daniel Lehmann","orcid":"https://orcid.org/0000-0002-4037-5152"},"institutions":[{"id":"https://openalex.org/I100066346","display_name":"University of Stuttgart","ror":"https://ror.org/04vnq7t77","country_code":"DE","type":"education","lineage":["https://openalex.org/I100066346"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Daniel Lehmann","raw_affiliation_strings":["University of Stuttgart,Stuttgart,Germany","University of Stuttgart, Stuttgart, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Stuttgart,Stuttgart,Germany","institution_ids":["https://openalex.org/I100066346"]},{"raw_affiliation_string":"University of Stuttgart, Stuttgart, Germany","institution_ids":["https://openalex.org/I100066346"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013438083","display_name":"Michael Pradel","orcid":"https://orcid.org/0000-0003-1623-498X"},"institutions":[{"id":"https://openalex.org/I100066346","display_name":"University of Stuttgart","ror":"https://ror.org/04vnq7t77","country_code":"DE","type":"education","lineage":["https://openalex.org/I100066346"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Michael Pradel","raw_affiliation_strings":["University of Stuttgart,Stuttgart,Germany","University of Stuttgart, Stuttgart, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Stuttgart,Stuttgart,Germany","institution_ids":["https://openalex.org/I100066346"]},{"raw_affiliation_string":"University of Stuttgart, Stuttgart, Germany","institution_ids":["https://openalex.org/I100066346"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5072088517","display_name":"Weihang Wang","orcid":"https://orcid.org/0000-0003-1175-4409"},"institutions":[{"id":"https://openalex.org/I63190737","display_name":"University at Buffalo, State University of New York","ror":"https://ror.org/01y64my43","country_code":"US","type":"education","lineage":["https://openalex.org/I63190737"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Weihang Wang","raw_affiliation_strings":["University at Buffalo, SUNY Buffalo,United States","University at Buffalo, SUNY Buffalo, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University at Buffalo, SUNY Buffalo,United States","institution_ids":["https://openalex.org/I63190737"]},{"raw_affiliation_string":"University at Buffalo, SUNY Buffalo, United States","institution_ids":["https://openalex.org/I63190737"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":31,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1574","last_page":"1589"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.9516891837120056},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8672488331794739},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8489271998405457},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.6615550518035889},{"id":"https://openalex.org/keywords/unobtrusive-javascript","display_name":"Unobtrusive JavaScript","score":0.6342683434486389},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.5580962896347046},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5542272925376892},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.5185166597366333},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.4893876910209656},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.38341742753982544},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3740595877170563},{"id":"https://openalex.org/keywords/rich-internet-application","display_name":"Rich Internet application","score":0.3108970522880554},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.24424222111701965}],"concepts":[{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.9516891837120056},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8672488331794739},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8489271998405457},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.6615550518035889},{"id":"https://openalex.org/C198240166","wikidata":"https://www.wikidata.org/wiki/Q2298909","display_name":"Unobtrusive JavaScript","level":4,"score":0.6342683434486389},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.5580962896347046},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5542272925376892},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.5185166597366333},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4893876910209656},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.38341742753982544},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3740595877170563},{"id":"https://openalex.org/C103048170","wikidata":"https://www.wikidata.org/wiki/Q725485","display_name":"Rich Internet application","level":3,"score":0.3108970522880554},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.24424222111701965}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp46214.2022.9833626","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46214.2022.9833626","pdf_url":null,"source":{"id":"https://openalex.org/S4363606603","display_name":"2022 IEEE Symposium on Security and Privacy (SP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6600000262260437,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320334678","display_name":"European Research Council","ror":"https://ror.org/0472cxd90"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":55,"referenced_works":["https://openalex.org/W58852127","https://openalex.org/W74184291","https://openalex.org/W1491237615","https://openalex.org/W1519699895","https://openalex.org/W1792275236","https://openalex.org/W1987644478","https://openalex.org/W2024170198","https://openalex.org/W2026054276","https://openalex.org/W2045002320","https://openalex.org/W2051498836","https://openalex.org/W2075344129","https://openalex.org/W2078571935","https://openalex.org/W2093050213","https://openalex.org/W2095450067","https://openalex.org/W2126709396","https://openalex.org/W2160289821","https://openalex.org/W2221203134","https://openalex.org/W2258082031","https://openalex.org/W2290933337","https://openalex.org/W2515404375","https://openalex.org/W2528185830","https://openalex.org/W2535603283","https://openalex.org/W2604507227","https://openalex.org/W2625141509","https://openalex.org/W2786043327","https://openalex.org/W2787932188","https://openalex.org/W2794652108","https://openalex.org/W2800651024","https://openalex.org/W2884103616","https://openalex.org/W2885525054","https://openalex.org/W2887682444","https://openalex.org/W2888822874","https://openalex.org/W2890228473","https://openalex.org/W2897385569","https://openalex.org/W2899850080","https://openalex.org/W2911975451","https://openalex.org/W2912248945","https://openalex.org/W2948848125","https://openalex.org/W2969612742","https://openalex.org/W2970044827","https://openalex.org/W2970323597","https://openalex.org/W3003572584","https://openalex.org/W3035328655","https://openalex.org/W3048513423","https://openalex.org/W3094180604","https://openalex.org/W3104717442","https://openalex.org/W3121642005","https://openalex.org/W3155555003","https://openalex.org/W6602413418","https://openalex.org/W6603050846","https://openalex.org/W6629287744","https://openalex.org/W6631261549","https://openalex.org/W6748403784","https://openalex.org/W6753518661","https://openalex.org/W6782072267"],"related_works":["https://openalex.org/W650647575","https://openalex.org/W597036300","https://openalex.org/W2477981260","https://openalex.org/W36303035","https://openalex.org/W2617623045","https://openalex.org/W4231812305","https://openalex.org/W2505509890","https://openalex.org/W3087706721","https://openalex.org/W4287664162","https://openalex.org/W3102852402"],"abstract_inverted_index":{"To":[0],"protect":[1],"web":[2],"users":[3],"from":[4],"malicious":[5,20,125],"JavaScript":[6,27,58,89,129,136],"code,":[7],"various":[8],"malware":[9,46,59,108,149,174,184],"detectors":[10,24],"have":[11],"been":[12],"proposed,":[13],"which":[14],"analyze":[15],"and":[16,39,126,155],"classify":[17],"code":[18,78],"as":[19,28,131,133],"or":[21],"benign.":[22],"State-of-the-art":[23],"focus":[25],"on":[26,181],"the":[29,52,65,72,97,112,115,151,186],"only":[30],"target":[31],"language.":[32],"However,":[33],"WebAssembly":[34,102],"provides":[35],"attackers":[36],"a":[37,75,121],"new":[38],"so":[40],"far":[41],"unexplored":[42],"opportunity":[43],"for":[44,55,164],"evading":[45,56,145],"detectors.":[47],"This":[48],"paper":[49],"presents":[50],"Wobfuscator,":[51],"first":[53],"technique":[54,73],"static":[57,148],"detection":[60,109],"by":[61],"moving":[62],"parts":[63,84],"of":[64,71,77,85,114,123,172],"computation":[66],"into":[67,90],"WebAssembly.":[68,91],"The":[69,92],"core":[70],"is":[74,94,142,153],"set":[76],"transformations":[79],"that":[80,99,139],"translate":[81],"carefully":[82],"selected":[83],"behavior":[86],"implemented":[87],"in":[88,96,166,185],"approach":[93,119,141,157],"opportunistic":[95],"sense":[98],"it":[100,104,162],"uses":[101],"where":[103],"helps":[105],"to":[106],"evade":[107],"without":[110],"compromising":[111],"correctness":[113],"code.":[116],"Evaluating":[117],"our":[118,140,156,176],"with":[120],"dataset":[122],"43,499":[124],"149,677":[127],"benign":[128],"files,":[130],"well":[132],"six":[134],"popular":[135],"libraries":[137],"reveals":[138],"effective":[143],"at":[144],"state-of-the-art,":[146],"learning-based":[147],"detectors;":[150],"obfuscation":[152],"semantic-preserving;":[154],"has":[158],"small":[159],"overhead,":[160],"making":[161],"practical":[163],"use":[165],"real-world":[167],"programs.":[168],"By":[169],"pinpointing":[170],"limitations":[171],"current":[173],"detectors,":[175],"work":[177],"motivates":[178],"future":[179],"efforts":[180],"detecting":[182],"multi-language":[183],"web.":[187]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":11},{"year":2022,"cited_by_count":3}],"updated_date":"2026-07-16T13:24:37.021932","created_date":"2025-10-10T00:00:00"}