Sökning: onr:"swepub:oai:DiVA.org:kth-331551" >
WebAssembly diversi...
-
Cabrera Arteaga, Javier,1992-KTH,Programvaruteknik och datorsystem, SCS
(författare)
WebAssembly diversification for malware evasion
- Artikel/kapitelEngelska2023
Förlag, utgivningsår, omfång ...
-
Elsevier BV,2023
-
printrdacarrier
Nummerbeteckningar
-
LIBRIS-ID:oai:DiVA.org:kth-331551
-
https://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-331551URI
-
https://doi.org/10.1016/j.cose.2023.103296DOI
Kompletterande språkuppgifter
-
Språk:engelska
-
Sammanfattning på:engelska
Ingår i deldatabas
Klassifikation
-
Ämneskategori:ref swepub-contenttype
-
Ämneskategori:art swepub-publicationtype
Anmärkningar
-
QC 20230711
-
WebAssembly has become a crucial part of the modern web, offering a faster alternative to JavaScript in browsers. While boosting rich applications in browser, this technology is also very efficient to develop cryptojacking malware. This has triggered the development of several methods to detect cryptojacking malware. However, these defenses have not considered the possibility of attackers using evasion techniques. This paper explores how automatic binary diversification can support the evasion of WebAssembly cryptojacking detectors. We experiment with a dataset of 33 WebAssembly cryptojacking binaries and evaluate our evasion technique against two malware detectors: VirusTotal, a general-purpose detector, and MINOS, a WebAssembly-specific detector. Our results demonstrate that our technique can automatically generate variants of WebAssembly cryptojacking that evade the detectors in 90% of cases for VirusTotal and 100% for MINOS. Our results emphasize the importance of meta-antiviruses and diverse detection techniques and provide new insights into which WebAssembly code transformations are best suited for malware evasion. We also show that the variants introduce limited performance overhead, making binary diversification an effective technique for evasion.
Ämnesord och genrebeteckningar
Biuppslag (personer, institutioner, konferenser, titlar ...)
-
Monperrus, MartinKTH,Teoretisk datalogi, TCS(Swepub:kth)u13jhcyf
(författare)
-
Toady, TimKTH,Skolan för elektroteknik och datavetenskap (EECS)(Swepub:kth)PI000000
(författare)
-
Baudry, BenoitKTH,Programvaruteknik och datorsystem, SCS(Swepub:kth)u10jjw3x
(författare)
-
KTHProgramvaruteknik och datorsystem, SCS
(creator_code:org_t)
Sammanhörande titlar
-
Ingår i:Computers & security (Print): Elsevier BV1310167-40481872-6208
Internetlänk
Hitta via bibliotek
Till lärosätets databas