SecWasm: Information Flow Control for WebAssembly
Paper in proceeding, 2022
We introduce SecWasm, the first general purpose information-flow control system for WebAssembly (Wasm), thus extending the safety guarantees offered by Wasm with guarantees that applications manipulate sensitive data in a secure way. SecWasm is a hybrid system enforcing termination-insensitive noninterference which overcomes the challenges posed by the uncommon characteristics for machine languages of Wasm in an elegant and thorough way.
Author
Iulia Bastys
Chalmers, Computer Science and Engineering (Chalmers), Information Security
Maximilian Algehed
Chalmers, Computer Science and Engineering (Chalmers), Functional Programming
Alexander Sjösten
Vienna University of Technology
Andrei Sabelfeld
Chalmers, Computer Science and Engineering (Chalmers), Information Security
Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
03029743 (ISSN) 16113349 (eISSN)
Vol. 13790 LNCS 74-1039783031223075 (ISBN)
29th International Static Analysis Symposium, SAS 2022
Auckland, New Zealand,
Auckland, New Zealand,
Subject Categories
Embedded Systems
Computer Systems
Other Electrical Engineering, Electronic Engineering, Information Engineering
DOI
10.1007/978-3-031-22308-2_5