CROW：WebAssembly的代码多样化
CROW: Code Diversification for WebAssembly
摘要：
WebAssembly的采用在过去几年中迅速增加，因为它为程序执行提供了快速和安全的模型。但是，WebAssembly也存在可能被侧通道攻击利用的漏洞。这类漏洞可以通过代码多样化来解决。在本文中，我们提出了第一个完全自动化的工作流程，用于多样化的WebAssembly二进制文件。我们提出了CROW，一个开源的工具，实现这个工作流程。我们评估CROW的303 C程序的能力，并研究其使用在现实生活中的安全敏感的程序：libsodium，加密库。总体而言，CROW能够为303个小程序中的239个（79%）生成不同的变体。此外，我们的实验表明，我们的方法和工具能够成功地多样化现成的加密软件（libsodium）。
英文摘要：
The adoption of WebAssembly has rapidly increased in the last few years as it provides a fast and safe model for program execution. However, WebAssembly is not exempt from vulnerabilities that could be exploited by side channels attacks. This class of vulnerabilities that can be addressed by code diversification. In this paper, we present the first fully automated workflow for the diversification of WebAssembly binaries. We present CROW, an open-source tool implementing this workflow. We evaluate CROW's capabilities on 303 C programs and study its use on a real-life security-sensitive program: libsodium, a cryptographic library. Overall, CROWis able to generate diverse variants for 239 out of 303,(79%) small programs. Furthermore, our experiments show that our approach and tool is able to successfully diversify off-the-shelf cryptographic software (libsodium).
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
