{"id":"https://openalex.org/W7169558890","doi":"https://doi.org/10.1145/3803437.3807382","title":"WasmCert: A Reproducible Hybrid Security Analysis Prototype for WebAssembly","display_name":"WasmCert: A Reproducible Hybrid Security Analysis Prototype for WebAssembly","publication_year":2026,"publication_date":"2026-07-05","ids":{"openalex":"https://openalex.org/W7169558890","doi":"https://doi.org/10.1145/3803437.3807382"},"language":null,"primary_location":{"id":"doi:10.1145/3803437.3807382","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3803437.3807382","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM International Conference on the Foundations of Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3803437.3807382","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5028855371","display_name":"Haoyi Zhang","orcid":"https://orcid.org/0009-0009-3693-786X"},"institutions":[{"id":"https://openalex.org/I69356397","display_name":"Xi\u2019an Jiaotong-Liverpool University","ror":"https://ror.org/03zmrmn05","country_code":"CN","type":"education","lineage":["https://openalex.org/I69356397"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haoyi Zhang","raw_affiliation_strings":["Xi\u2019an Jiaotong-Liverpool University, Suzhou, China"],"raw_orcid":"https://orcid.org/0009-0009-3693-786X","affiliations":[{"raw_affiliation_string":"Xi\u2019an Jiaotong-Liverpool University, Suzhou, China","institution_ids":["https://openalex.org/I69356397"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5141085829","display_name":"Tianfeng Liang","orcid":"https://orcid.org/0009-0000-5208-6414"},"institutions":[{"id":"https://openalex.org/I69356397","display_name":"Xi\u2019an Jiaotong-Liverpool University","ror":"https://ror.org/03zmrmn05","country_code":"CN","type":"education","lineage":["https://openalex.org/I69356397"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tianfeng Liang","raw_affiliation_strings":["Xi'an Jiaotong-Liverpool University, Suzhou, China"],"raw_orcid":"https://orcid.org/0009-0000-5208-6414","affiliations":[{"raw_affiliation_string":"Xi'an Jiaotong-Liverpool University, Suzhou, China","institution_ids":["https://openalex.org/I69356397"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139502712","display_name":"Huaijin Ran","orcid":"https://orcid.org/0009-0009-2482-2344"},"institutions":[{"id":"https://openalex.org/I69356397","display_name":"Xi\u2019an Jiaotong-Liverpool University","ror":"https://ror.org/03zmrmn05","country_code":"CN","type":"education","lineage":["https://openalex.org/I69356397"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Huaijin Ran","raw_affiliation_strings":["Xi'an Jiaotong-Liverpool University, Suzhou, China"],"raw_orcid":"https://orcid.org/0009-0009-2482-2344","affiliations":[{"raw_affiliation_string":"Xi'an Jiaotong-Liverpool University, Suzhou, China","institution_ids":["https://openalex.org/I69356397"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079541420","display_name":"Md Maruf Hasan","orcid":"https://orcid.org/0000-0001-9809-9376"},"institutions":[{"id":"https://openalex.org/I69356397","display_name":"Xi\u2019an Jiaotong-Liverpool University","ror":"https://ror.org/03zmrmn05","country_code":"CN","type":"education","lineage":["https://openalex.org/I69356397"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Md Maruf Hasan","raw_affiliation_strings":["Xi'an Jiaotong-Liverpool University, Suzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-9809-9376","affiliations":[{"raw_affiliation_string":"Xi'an Jiaotong-Liverpool University, Suzhou, China","institution_ids":["https://openalex.org/I69356397"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5052969638","display_name":"Xunzhu Tang","orcid":"https://orcid.org/0000-0002-6377-0884"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Xunzhu Tang","raw_affiliation_strings":["University of Luxembourg, Luxembourg, Luxembourg"],"raw_orcid":"https://orcid.org/0000-0002-6377-0884","affiliations":[{"raw_affiliation_string":"University of Luxembourg, Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1398","last_page":"1399"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":null,"topics":[],"keywords":[{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.6118000149726868},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.46950000524520874},{"id":"https://openalex.org/keywords/heuristic","display_name":"Heuristic","score":0.4659999907016754},{"id":"https://openalex.org/keywords/pipeline-transport","display_name":"Pipeline transport","score":0.45260000228881836},{"id":"https://openalex.org/keywords/baseline","display_name":"Baseline (sea)","score":0.3612000048160553},{"id":"https://openalex.org/keywords/security-analysis","display_name":"Security analysis","score":0.35339999198913574}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6798999905586243},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.6118000149726868},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.46950000524520874},{"id":"https://openalex.org/C173801870","wikidata":"https://www.wikidata.org/wiki/Q201413","display_name":"Heuristic","level":2,"score":0.4659999907016754},{"id":"https://openalex.org/C175309249","wikidata":"https://www.wikidata.org/wiki/Q725864","display_name":"Pipeline transport","level":2,"score":0.45260000228881836},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.3612000048160553},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.35339999198913574},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.35120001435279846},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.34470000863075256},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.3330000042915344},{"id":"https://openalex.org/C50897621","wikidata":"https://www.wikidata.org/wiki/Q2665508","display_name":"Hybrid system","level":2,"score":0.31439998745918274},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.30379998683929443},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.2962999939918518},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.26840001344680786}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3803437.3807382","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3803437.3807382","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM International Conference on the Foundations of Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3803437.3807382","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3803437.3807382","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM International Conference on the Foundations of Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":5,"referenced_works":["https://openalex.org/W1480909796","https://openalex.org/W2625141509","https://openalex.org/W2778960843","https://openalex.org/W2888822874","https://openalex.org/W4224744482"],"related_works":[],"abstract_inverted_index":{"WebAssembly":[0],"(Wasm)":[1],"is":[2,70,74],"increasingly":[3],"deployed":[4],"across":[5],"browsers,":[6],"edge":[7],"platforms,":[8],"and":[9,38,72],"server-side":[10],"runtimes,":[11],"yet":[12],"reproducible":[13],"security-analysis":[14],"pipelines":[15],"for":[16,55],"Wasm":[17],"artifacts":[18],"remain":[19],"limited.":[20],"We":[21],"present":[22],"WasmCert,":[23],"a":[24,43,56,65],"hybrid":[25],"prototype":[26],"that":[27],"combines":[28],"static":[29],"token-level":[30],"checks":[31],"with":[32],"source-level":[33,83],"heuristics,":[34],"runtime":[35],"trap":[36],"evidence,":[37],"optional":[39],"SMT":[40],"post-checking.":[41],"On":[42],"benchmark":[44],"of":[45],"355":[46],"vulnerability-oriented":[47],"cases,":[48],"WasmCert":[49],"achieves":[50],"86.48%":[51],"detection":[52],"versus":[53],"8.17%":[54],"runtime-only":[57],"baseline":[58],"(p":[59],"=":[60],"4.12":[61],"\u00d7":[62],"10-84).":[63],"Under":[64],"security-focused":[66],"quality":[67],"view,":[68],"Precision":[69],"96.21%":[71],"Specificity":[73],"97.57%.":[75],"Heuristic":[76],"ablation":[77],"attributes":[78],"39.72":[79],"percentage":[80],"points":[81],"to":[82],"heuristics.":[84]},"counts_by_year":[],"updated_date":"2026-07-18T05:58:53.570196","created_date":"2026-07-18T00:00:00"}