WasmEye: Language- and Platform-independent Anomaly Detection for WebAssembly
Vogel A, Glörfeld T, Szekely-Schenker A, Trenner T, Ermler R, Kapitza R (2025)
Publication Type: Conference contribution
Publication year: 2025
Publisher: Association for Computing Machinery, Inc
Pages Range: 314-325
Conference Proceedings Title: Middleware 2025 - Proceedings of the 26th ACM International Middleware Conference
Event location: Nashville, TN, USA
ISBN: 9798400715549
Abstract
With WebAssembly, you can write and run code in various languages on almost any platform. This has already led to its versatile use in IoT, edge, and cloud environments. With this broad use in complex distributed environments, additional control and management support, such as anomaly detection, to ensure reliable and secure execution will become key to WebAssembly's future success. We want to detect anomalies in WebAssembly modules to protect the system from bugs or malicious code. However, current anomaly detection solutions do not adhere to the WebAssembly philosophy by ignoring platform and source language independence or by being limited to specific types of attacks.In this paper, we present WasmEye, a platform- and source language-independent anomaly detection system for WebAssembly. Wasm-Eye's anomaly detection is based on ensemble learning, directly integrated into the WebAssembly module. This allows WasmEye to offer platform-independent anomaly detection without any source language restrictions - a key feature for the WebAssembly ecosystem. We present the design and implementation of WasmEye, show how we can achieve secure anomaly detection inside of modules themselves and evaluate its performance characteristics and effectiveness of anomaly detection.
Involved external institutions
Germany (DE)How to cite
APA:
Vogel, A., Glörfeld, T., Szekely-Schenker, A., Trenner, T., Ermler, R., & Kapitza, R. (2025). WasmEye: Language- and Platform-independent Anomaly Detection for WebAssembly. In Middleware 2025 - Proceedings of the 26th ACM International Middleware Conference (pp. 314-325). Nashville, TN, USA: Association for Computing Machinery, Inc.
MLA:
Vogel, Arne, et al. "WasmEye: Language- and Platform-independent Anomaly Detection for WebAssembly." Proceedings of the 26th ACM International Middleware Conference, Middleware 2025, Nashville, TN, USA Association for Computing Machinery, Inc, 2025. 314-325.
BibTeX: Download