{"id":"https://openalex.org/W4411523072","doi":"https://doi.org/10.1145/3728937","title":"Wemby\u2019s Web: Hunting for Memory Corruption in WebAssembly","display_name":"Wemby\u2019s Web: Hunting for Memory Corruption in WebAssembly","publication_year":2025,"publication_date":"2025-06-22","ids":{"openalex":"https://openalex.org/W4411523072","doi":"https://doi.org/10.1145/3728937"},"language":"en","primary_location":{"id":"doi:10.1145/3728937","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3728937","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3728937","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5018075915","display_name":"Oussama Draissi","orcid":"https://orcid.org/0009-0005-6065-8087"},"institutions":[{"id":"https://openalex.org/I62318514","display_name":"University of Duisburg-Essen","ror":"https://ror.org/04mz5ra38","country_code":"DE","type":"education","lineage":["https://openalex.org/I62318514"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Oussama Draissi","raw_affiliation_strings":["University of Duisburg-Essen, Essen, Germany"],"raw_orcid":"https://orcid.org/0009-0005-6065-8087","affiliations":[{"raw_affiliation_string":"University of Duisburg-Essen, Essen, Germany","institution_ids":["https://openalex.org/I62318514"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014851696","display_name":"Tobias Cloosters","orcid":"https://orcid.org/0009-0008-3682-0197"},"institutions":[{"id":"https://openalex.org/I62318514","display_name":"University of Duisburg-Essen","ror":"https://ror.org/04mz5ra38","country_code":"DE","type":"education","lineage":["https://openalex.org/I62318514"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Tobias Cloosters","raw_affiliation_strings":["University of Duisburg-Essen, Essen, Germany"],"raw_orcid":"https://orcid.org/0009-0008-3682-0197","affiliations":[{"raw_affiliation_string":"University of Duisburg-Essen, Essen, Germany","institution_ids":["https://openalex.org/I62318514"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016611640","display_name":"David Klein","orcid":"https://orcid.org/0000-0001-8468-8516"},"institutions":[{"id":"https://openalex.org/I94509681","display_name":"Technische Universit\u00e4t Braunschweig","ror":"https://ror.org/010nsgg66","country_code":"DE","type":"education","lineage":["https://openalex.org/I94509681"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"David Klein","raw_affiliation_strings":["TU Braunschweig, Braunschweig, Germany"],"raw_orcid":"https://orcid.org/0000-0001-8468-8516","affiliations":[{"raw_affiliation_string":"TU Braunschweig, Braunschweig, Germany","institution_ids":["https://openalex.org/I94509681"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042179519","display_name":"Michael Rodler","orcid":"https://orcid.org/0009-0002-3082-4345"},"institutions":[{"id":"https://openalex.org/I4210089985","display_name":"Amazon (Germany)","ror":"https://ror.org/00b9ktm87","country_code":"DE","type":"company","lineage":["https://openalex.org/I1311688040","https://openalex.org/I4210089985"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Michael Rodler","raw_affiliation_strings":["Amazon Web Services, D\u00fcsseldorf, Germany"],"raw_orcid":"https://orcid.org/0009-0002-3082-4345","affiliations":[{"raw_affiliation_string":"Amazon Web Services, D\u00fcsseldorf, Germany","institution_ids":["https://openalex.org/I4210089985"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069748873","display_name":"Marius Musch","orcid":"https://orcid.org/0000-0001-6894-1008"},"institutions":[{"id":"https://openalex.org/I94509681","display_name":"Technische Universit\u00e4t Braunschweig","ror":"https://ror.org/010nsgg66","country_code":"DE","type":"education","lineage":["https://openalex.org/I94509681"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Marius Musch","raw_affiliation_strings":["TU Braunschweig, Braunschweig, Germany"],"raw_orcid":"https://orcid.org/0000-0001-6894-1008","affiliations":[{"raw_affiliation_string":"TU Braunschweig, Braunschweig, Germany","institution_ids":["https://openalex.org/I94509681"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002067855","display_name":"Martin Johns","orcid":"https://orcid.org/0000-0003-2574-5060"},"institutions":[{"id":"https://openalex.org/I94509681","display_name":"Technische Universit\u00e4t Braunschweig","ror":"https://ror.org/010nsgg66","country_code":"DE","type":"education","lineage":["https://openalex.org/I94509681"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Martin Johns","raw_affiliation_strings":["TU Braunschweig, Braunschweig, Germany"],"raw_orcid":"https://orcid.org/0000-0003-2574-5060","affiliations":[{"raw_affiliation_string":"TU Braunschweig, Braunschweig, Germany","institution_ids":["https://openalex.org/I94509681"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089242868","display_name":"Lucas Davi","orcid":"https://orcid.org/0000-0002-7322-2777"},"institutions":[{"id":"https://openalex.org/I62318514","display_name":"University of Duisburg-Essen","ror":"https://ror.org/04mz5ra38","country_code":"DE","type":"education","lineage":["https://openalex.org/I62318514"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Lucas Davi","raw_affiliation_strings":["University of Duisburg-Essen, Essen, Germany"],"raw_orcid":"https://orcid.org/0000-0002-7322-2777","affiliations":[{"raw_affiliation_string":"University of Duisburg-Essen, Essen, Germany","institution_ids":["https://openalex.org/I62318514"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.7588,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.87109925,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":"2","issue":"ISSTA","first_page":"1326","last_page":"1349"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10478","display_name":"Diamond and Carbon-based Materials Research","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/2505","display_name":"Materials Chemistry"},"field":{"id":"https://openalex.org/fields/25","display_name":"Materials Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10472","display_name":"Semiconductor materials and devices","score":0.9584000110626221,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"Cross-site scripting","score":0.8342851400375366},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.8305474519729614},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.820925235748291},{"id":"https://openalex.org/keywords/memory-safety","display_name":"Memory safety","score":0.7291701436042786},{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.5935128927230835},{"id":"https://openalex.org/keywords/scripting-language","display_name":"Scripting language","score":0.5918791890144348},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5194668173789978},{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.5065509080886841},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4617014527320862},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.45654061436653137},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.4480305016040802},{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.4213925302028656},{"id":"https://openalex.org/keywords/language-change","display_name":"Language change","score":0.4120885729789734},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.3714669942855835},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.2163902223110199},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.1916421353816986},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.14769849181175232},{"id":"https://openalex.org/keywords/web-development","display_name":"Web development","score":0.07895782589912415}],"concepts":[{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.8342851400375366},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.8305474519729614},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.820925235748291},{"id":"https://openalex.org/C28180684","wikidata":"https://www.wikidata.org/wiki/Q4080983","display_name":"Memory safety","level":3,"score":0.7291701436042786},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.5935128927230835},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.5918791890144348},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5194668173789978},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.5065509080886841},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4617014527320862},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.45654061436653137},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.4480305016040802},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.4213925302028656},{"id":"https://openalex.org/C2780027415","wikidata":"https://www.wikidata.org/wiki/Q524648","display_name":"Language change","level":2,"score":0.4120885729789734},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.3714669942855835},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.2163902223110199},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.1916421353816986},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.14769849181175232},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.07895782589912415},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C124952713","wikidata":"https://www.wikidata.org/wiki/Q8242","display_name":"Literature","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3728937","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3728937","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3728937","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3728937","pdf_url":null,"source":{"id":"https://openalex.org/S4404663975","display_name":"Proceedings of the ACM on software engineering.","issn_l":"2994-970X","issn":["2994-970X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Software Engineering","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.8299999833106995}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":63,"referenced_works":["https://openalex.org/W1538332098","https://openalex.org/W1720840691","https://openalex.org/W1963947298","https://openalex.org/W1970005004","https://openalex.org/W1991074244","https://openalex.org/W2097444001","https://openalex.org/W2101678831","https://openalex.org/W2138788987","https://openalex.org/W2159059513","https://openalex.org/W2162800072","https://openalex.org/W2350778671","https://openalex.org/W2512784977","https://openalex.org/W2535617737","https://openalex.org/W2564812877","https://openalex.org/W2625141509","https://openalex.org/W2726232829","https://openalex.org/W2790761820","https://openalex.org/W2794007494","https://openalex.org/W2846896781","https://openalex.org/W2888822874","https://openalex.org/W2890228473","https://openalex.org/W2897385569","https://openalex.org/W2901089484","https://openalex.org/W2947109320","https://openalex.org/W2948848125","https://openalex.org/W2967058495","https://openalex.org/W3024280588","https://openalex.org/W3090475639","https://openalex.org/W3103619372","https://openalex.org/W3104442698","https://openalex.org/W3117384287","https://openalex.org/W3138722985","https://openalex.org/W3154106427","https://openalex.org/W3155555003","https://openalex.org/W3164306598","https://openalex.org/W4210308899","https://openalex.org/W4224744482","https://openalex.org/W4225999506","https://openalex.org/W4281769038","https://openalex.org/W4283332017","https://openalex.org/W4288057729","https://openalex.org/W4307020331","https://openalex.org/W4324007042","https://openalex.org/W4367046638","https://openalex.org/W4384154469","https://openalex.org/W4384155734","https://openalex.org/W4385080305","https://openalex.org/W4385412537","https://openalex.org/W4385679748","https://openalex.org/W4388483003","https://openalex.org/W4388483399","https://openalex.org/W4388856869","https://openalex.org/W4388858789","https://openalex.org/W4394007177","https://openalex.org/W4400021229","https://openalex.org/W4400611642","https://openalex.org/W4402264500","https://openalex.org/W4402264821","https://openalex.org/W4402442120","https://openalex.org/W4402442980","https://openalex.org/W4402442995","https://openalex.org/W4402443144","https://openalex.org/W4403223320"],"related_works":["https://openalex.org/W2907490423","https://openalex.org/W2766465278","https://openalex.org/W2746644282","https://openalex.org/W3137121249","https://openalex.org/W2117353399","https://openalex.org/W2184634743","https://openalex.org/W1999991879","https://openalex.org/W2204734878","https://openalex.org/W2061640969","https://openalex.org/W3122742973"],"abstract_inverted_index":{"WebAssembly":[0,24,96,177,214],"enables":[1,55],"fast":[2],"execution":[3],"of":[4,39,47,74,204,223],"performance-critical":[5],"in":[6,42,166],"web":[7,28,167],"applications":[8,168],"utilizing":[9],"native":[10],"code.":[11],"However,":[12],"recent":[13],"research":[14],"has":[15],"demonstrated":[16],"the":[17,35,45,95,99,116,143,199,234],"potential":[18],"for":[19],"memory":[20,40,53,91,163,182,193],"corruption":[21,41,54,164,183,194],"errors":[22,92,165],"within":[23],"modules":[25],"to":[26,93,127,147,188,233],"exploit":[27,90],"applications.":[29],"In":[30,202],"this":[31,125,138,172],"work,":[32],"we":[33,140,174],"present":[34,141],"first":[36,144],"systematic":[37],"analysis":[38,64],"WebAssembly,":[43],"unveiling":[44],"prevalence":[46],"a":[48,59,85],"novel":[49],"threat":[50],"model":[51],"where":[52,98],"code":[56,130,230],"injection":[57],"on":[58,198],"victim\u2019s":[60],"browser.":[61],"Our":[62],"large-scale":[63],"across":[65],"37797":[66],"domains":[67],"reveals":[68],"that":[69,155,179,210],"an":[70,87,121,219],"alarming":[71],"29411":[72],"(77.81%)":[73],"those":[75],"fully":[76],"trust":[77,126],"data":[78,100],"coming":[79],"from":[80],"potentially":[81],"attacker-controlled":[82],"sources.":[83],"As":[84],"result,":[86],"attacker":[88,122],"can":[89,123],"manipulate":[94],"memory,":[97],"is":[101,157],"implicitly":[102],"trusted":[103],"and":[104,226],"frequently":[105],"passed":[106],"into":[107,115],"security-sensitive":[108],"functions":[109],"such":[110],"as":[111],"eval":[112],"or":[113],"directly":[114],"DOM":[117],"via":[118],"innerHTML.":[119],"Thus,":[120],"abuse":[124],"gain":[128],"JavaScript":[129],"execution,":[131],"i.e.,":[132],"Cross-Site":[133],"Scripting":[134],"(XSS).":[135],"To":[136],"tackle":[137],"issue,":[139],"Wemby,":[142],"viable":[145],"approach":[146],"efficiently":[148],"analyze":[149],"WebAssembly-powered":[150],"websites":[151],"holistically.":[152],"We":[153,185],"demonstrate":[154],"Wemby":[156,187,211,217],"proficient":[158],"at":[159],"detecting":[160],"remotely":[161],"exposed":[162],"through":[169],"fuzzing.":[170],"For":[171],"purpose,":[173],"implement":[175],"binary-only":[176],"instrumentation":[178],"provides":[180],"fine-grained":[181],"oracles.":[184],"applied":[186],"different":[189],"websites,":[190],"uncovering":[191],"several":[192],"bugs,":[195],"including":[196],"one":[197],"Zoom":[200],"platform.":[201],"terms":[203],"performance,":[205],"our":[206],"ablation":[207],"study":[208],"demonstrates":[209],"outperforms":[212],"current":[213],"fuzzers.":[215],"Specifically,":[216],"achieves":[218],"average":[220],"speed":[221],"improvement":[222],"232":[224],"times":[225],"delivers":[227],"46%":[228],"greater":[229],"coverage":[231],"compared":[232],"state-of-the-art.":[235]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}