7 Search Results for "Sabelfeld, Andrei"

Document
DOI: 10.4230/LIPIcs.ECOOP.2025.23
Wastrumentation: Portable WebAssembly Dynamic Analysis with Support for Intercession

Authors: Aäron Munsters, Angel Luis Scull Pupo, and Elisa Gonzalez Boix

Published in: LIPIcs, Volume 333, 39th European Conference on Object-Oriented Programming (ECOOP 2025)

Abstract
Dynamic program analyses help in understanding a program’s runtime behavior and detect issues related to security, program comprehension, or profiling. Instrumentation platforms aid analysis developers by offering a high-level API to write the analysis, and inserting the analysis into the target program. However, current instrumentation platforms for WebAssembly (Wasm) restrict analysis portability because they require concrete runtime environments. Moreover, their analysis API only allows the development of analyses that observe the target program but cannot modify it. As a result, many popular dynamic analyses present for other languages, such as runtime hardening, virtual patching or runtime optimization, cannot currently be implemented for Wasm atop a dynamic analysis platform. Instead, they need to be built manually, which requires knowledge of low-level details of the Wasm’s semantics and instruction set, and how to safely manipulate it. This paper introduces Wastrumentation, the first dynamic analysis platform for WebAssembly that supports intercession. Our solution, based on source code instrumentation, weaves the analysis code directly into the target program code. Inlining the analysis into the target’s source code avoids dependencies on the runtime environment, making analyses portable across Wasm VMs. Moreover, it enables the implementation of analyses in any Wasm-compatible language. We evaluate our solution in two ways. First, we compare it against a state-of-the-art source code instrumentation platform using the WasmR3 benchmarks. The results show improved memory consumption and competitive performance overhead. Second, we develop an extensive portfolio of dynamic analyses, including novel analyses previously unattainable with source code instrumentation platforms, such as memoization, safe heap access, and the removal of NaN non-determinism.
Cite as

Aäron Munsters, Angel Luis Scull Pupo, and Elisa Gonzalez Boix. Wastrumentation: Portable WebAssembly Dynamic Analysis with Support for Intercession. In 39th European Conference on Object-Oriented Programming (ECOOP 2025). Leibniz International Proceedings in Informatics (LIPIcs), Volume 333, pp. 23:1-23:29, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2025)

Copy BibTex To Clipboard

@InProceedings{munsters_et_al:LIPIcs.ECOOP.2025.23,
  author =	{Munsters, A\"{a}ron and Scull Pupo, Angel Luis and Gonzalez Boix, Elisa},
  title =	{{Wastrumentation: Portable WebAssembly Dynamic Analysis with Support for Intercession}},
  booktitle =	{39th European Conference on Object-Oriented Programming (ECOOP 2025)},
  pages =	{23:1--23:29},
  series =	{Leibniz International Proceedings in Informatics (LIPIcs)},
  ISBN =	{978-3-95977-373-7},
  ISSN =	{1868-8969},
  year =	{2025},
  volume =	{333},
  editor =	{Aldrich, Jonathan and Silva, Alexandra},
  publisher =	{Schloss Dagstuhl -- Leibniz-Zentrum f{\"u}r Informatik},
  address =	{Dagstuhl, Germany},
  URL =		{https://drops.dagstuhl.de/entities/document/10.4230/LIPIcs.ECOOP.2025.23},
  URN =		{urn:nbn:de:0030-drops-233153},
  doi =		{10.4230/LIPIcs.ECOOP.2025.23},
  annote =	{Keywords: WebAssembly, dynamic analysis, instrumentation platform, intercession}
}
Document
DOI: 10.4230/DagRep.2.10.1
Web Application Security (Dagstuhl Seminar 12401)

Authors: Lieven Desmet, Martin Johns, Benjamin Livshits, and Andrei Sabelfeld

Published in: Dagstuhl Reports, Volume 2, Issue 10 (2013)

Abstract
This report documents the program and the outcomes of Dagstuhl Seminar 12401 ``Web Application Security''. The seminar brought 44 web security researchers together, coming from companies and research institutions across Europe and the US. The seminar had a well-filled program, with 3 keynotes, 28 research talks, and 15 5-minute talks. As web application security is a broad research domain, a diverse set of recent research results was presented during the talks, covering the web security vulnerability landscape, information-flow control, JavaScript formalization, JavaScript confinement, and infrastructure and server hardening. In addition to the plenary program, the seminar also featured three parallel break-out sessions on Cross-Site Scripting (XSS), JavaScript and Information-flow control.
Cite as

Lieven Desmet, Martin Johns, Benjamin Livshits, and Andrei Sabelfeld. Web Application Security (Dagstuhl Seminar 12401). In Dagstuhl Reports, Volume 2, Issue 10, pp. 1-37, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2013)

Copy BibTex To Clipboard

@Article{desmet_et_al:DagRep.2.10.1,
  author =	{Desmet, Lieven and Johns, Martin and Livshits, Benjamin and Sabelfeld, Andrei},
  title =	{{Web Application Security (Dagstuhl Seminar 12401)}},
  pages =	{1--37},
  journal =	{Dagstuhl Reports},
  ISSN =	{2192-5283},
  year =	{2013},
  volume =	{2},
  number =	{10},
  editor =	{Desmet, Lieven and Johns, Martin and Livshits, Benjamin and Sabelfeld, Andrei},
  publisher =	{Schloss Dagstuhl -- Leibniz-Zentrum f{\"u}r Informatik},
  address =	{Dagstuhl, Germany},
  URL =		{https://drops.dagstuhl.de/entities/document/10.4230/DagRep.2.10.1},
  URN =		{urn:nbn:de:0030-drops-39051},
  doi =		{10.4230/DagRep.2.10.1},
  annote =	{Keywords: Web application security, JavaScript, Secure interaction, Information flow, Secure composition, Application security, Web 2.0}
}
Document
DOI: 10.4230/DagSemProc.07091.1
07091 Abstracts Collection – Mobility, Ubiquity and Security

Authors: Gilles Barthe, Heiko Mantel, Peter Müller, Andrew C. Myers, and Andrei Sabelfeld

Published in: Dagstuhl Seminar Proceedings, Volume 7091, Mobility, Ubiquity and Security (2007)

Abstract
From 25.02.2007 to 02.03.2007, the Dagstuhl Seminar 07091 ``Mobility, Ubiquity and Security'' was held in the International Conference and Research Center (IBFI), Schloss Dagstuhl. During the seminar, several participants presented their current research, and ongoing work and open problems were discussed. Abstracts of the presentations given during the seminar as well as abstracts of seminar results and ideas are put together in this paper. The first section describes the seminar topics and goals in general. Links to extended abstracts or full papers are provided, if available.
Cite as

Gilles Barthe, Heiko Mantel, Peter Müller, Andrew C. Myers, and Andrei Sabelfeld. 07091 Abstracts Collection – Mobility, Ubiquity and Security. In Mobility, Ubiquity and Security. Dagstuhl Seminar Proceedings, Volume 7091, pp. 1-17, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2007)

Copy BibTex To Clipboard

@InProceedings{barthe_et_al:DagSemProc.07091.1,
  author =	{Barthe, Gilles and Mantel, Heiko and M\"{u}ller, Peter and Myers, Andrew C. and Sabelfeld, Andrei},
  title =	{{07091 Abstracts Collection – Mobility, Ubiquity and Security}},
  booktitle =	{Mobility, Ubiquity and Security},
  pages =	{1--17},
  series =	{Dagstuhl Seminar Proceedings (DagSemProc)},
  ISSN =	{1862-4405},
  year =	{2007},
  volume =	{7091},
  editor =	{Gilles Barthe and Heiko Mantel and Peter M\"{u}ller and Andrew C. Myers and Andrei Sabelfeld},
  publisher =	{Schloss Dagstuhl -- Leibniz-Zentrum f{\"u}r Informatik},
  address =	{Dagstuhl, Germany},
  URL =		{https://drops.dagstuhl.de/entities/document/10.4230/DagSemProc.07091.1},
  URN =		{urn:nbn:de:0030-drops-11026},
  doi =		{10.4230/DagSemProc.07091.1},
  annote =	{Keywords: Mobility, confidentiality, integrity, availability, type systems, static analysis, information flow, cryptography, proof-carrying code}
}
Document
DOI: 10.4230/DagSemProc.07091.2
07091 Executive Summary – Mobility, Ubiquity and Security

Authors: Gilles Barthe, Heiko Mantel, Peter Müller, Andrew C. Myers, and Andrei Sabelfeld

Published in: Dagstuhl Seminar Proceedings, Volume 7091, Mobility, Ubiquity and Security (2007)

Abstract
Increasing code mobility and ubiquity raises serious concerns about the security of modern computing infrastructures. The focus of this seminar was on securing computing systems by design and by construction.
Cite as

Gilles Barthe, Heiko Mantel, Peter Müller, Andrew C. Myers, and Andrei Sabelfeld. 07091 Executive Summary – Mobility, Ubiquity and Security. In Mobility, Ubiquity and Security. Dagstuhl Seminar Proceedings, Volume 7091, pp. 1-2, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2007)

Copy BibTex To Clipboard

@InProceedings{barthe_et_al:DagSemProc.07091.2,
  author =	{Barthe, Gilles and Mantel, Heiko and M\"{u}ller, Peter and Myers, Andrew C. and Sabelfeld, Andrei},
  title =	{{07091 Executive Summary – Mobility, Ubiquity and Security}},
  booktitle =	{Mobility, Ubiquity and Security},
  pages =	{1--2},
  series =	{Dagstuhl Seminar Proceedings (DagSemProc)},
  ISSN =	{1862-4405},
  year =	{2007},
  volume =	{7091},
  editor =	{Gilles Barthe and Heiko Mantel and Peter M\"{u}ller and Andrew C. Myers and Andrei Sabelfeld},
  publisher =	{Schloss Dagstuhl -- Leibniz-Zentrum f{\"u}r Informatik},
  address =	{Dagstuhl, Germany},
  URL =		{https://drops.dagstuhl.de/entities/document/10.4230/DagSemProc.07091.2},
  URN =		{urn:nbn:de:0030-drops-11017},
  doi =		{10.4230/DagSemProc.07091.2},
  annote =	{Keywords: Mobility, confidentiality, integrity, availability, type systems, static analysis, information flow, cryptography, proof-carrying code}
}
Document
DOI: 10.4230/DagSemProc.03411.1
03411 Final Report – Language Based Security

Authors: Anindya Banerjee, Heiko Mantel, David Naumann, and Andrei Sabelfeld

Published in: Dagstuhl Seminar Proceedings, Volume 3411, Language-Based Security (2005)

Abstract
This paper summarizes the objectives and structure of a seminar with the same title, held from October 5th to 10th 2003 at Schloss Dagstuhl, Germany.
Cite as

Anindya Banerjee, Heiko Mantel, David Naumann, and Andrei Sabelfeld. 03411 Final Report – Language Based Security. In Language-Based Security. Dagstuhl Seminar Proceedings, Volume 3411, pp. 1-5, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2005)

Copy BibTex To Clipboard

@InProceedings{banerjee_et_al:DagSemProc.03411.1,
  author =	{Banerjee, Anindya and Mantel, Heiko and Naumann, David and Sabelfeld, Andrei},
  title =	{{03411  Final Report – Language Based Security}},
  booktitle =	{Language-Based Security},
  pages =	{1--5},
  series =	{Dagstuhl Seminar Proceedings (DagSemProc)},
  ISSN =	{1862-4405},
  year =	{2005},
  volume =	{3411},
  editor =	{Anindya Banerjee and Heiko Mantel and David Naumann and Andrei Sabelfeld},
  publisher =	{Schloss Dagstuhl -- Leibniz-Zentrum f{\"u}r Informatik},
  address =	{Dagstuhl, Germany},
  URL =		{https://drops.dagstuhl.de/entities/document/10.4230/DagSemProc.03411.1},
  URN =		{urn:nbn:de:0030-drops-1724},
  doi =		{10.4230/DagSemProc.03411.1},
  annote =	{Keywords: Access control , information flow , noninterference , downgrading protocol analysis}
}
Document
DOI: 10.4230/DagSemProc.03411.2
03411 Abstracts Collection – Language Based Security

Authors: Anindya Banerjee, Heiko Mantel, David Naumann, and Andrei Sabelfeld

Published in: Dagstuhl Seminar Proceedings, Volume 3411, Language-Based Security (2005)

Abstract
From October 5th to 10th 2003,the Dagstuhl Seminar 03411 ``Language Based security'' was held in the International Conference and Research Center (IBFI), Schloss Dagstuhl. During the seminar, several participants presented their current research, and ongoing work and open problems were discussed. Abstracts of the presentations given during the seminar are put together in this paper.
Cite as

Anindya Banerjee, Heiko Mantel, David Naumann, and Andrei Sabelfeld. 03411 Abstracts Collection – Language Based Security. In Language-Based Security. Dagstuhl Seminar Proceedings, Volume 3411, pp. 1-20, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2005)

Copy BibTex To Clipboard

@InProceedings{banerjee_et_al:DagSemProc.03411.2,
  author =	{Banerjee, Anindya and Mantel, Heiko and Naumann, David and Sabelfeld, Andrei},
  title =	{{03411 Abstracts Collection – Language Based Security}},
  booktitle =	{Language-Based Security},
  pages =	{1--20},
  series =	{Dagstuhl Seminar Proceedings (DagSemProc)},
  ISSN =	{1862-4405},
  year =	{2005},
  volume =	{3411},
  editor =	{Anindya Banerjee and Heiko Mantel and David Naumann and Andrei Sabelfeld},
  publisher =	{Schloss Dagstuhl -- Leibniz-Zentrum f{\"u}r Informatik},
  address =	{Dagstuhl, Germany},
  URL =		{https://drops.dagstuhl.de/entities/document/10.4230/DagSemProc.03411.2},
  URN =		{urn:nbn:de:0030-drops-1731},
  doi =		{10.4230/DagSemProc.03411.2},
  annote =	{Keywords: Access control , information flow , noninterference , downgrading protocol analysis}
}
Document
DOI: 10.4230/DagSemRep.397
Language-Based Security (Dagstuhl Seminar 03411)

Authors: Anindya Banerjee, Heiko Mantel, David A. Naumann, and Andrei Sabelfeld

Published in: Dagstuhl Seminar Reports. Dagstuhl Seminar Reports, Volume 1 (2021)

Abstract
Cite as

Anindya Banerjee, Heiko Mantel, David A. Naumann, and Andrei Sabelfeld. Language-Based Security (Dagstuhl Seminar 03411). Dagstuhl Seminar Report 397, pp. 1-10, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2003)

Copy BibTex To Clipboard

@TechReport{banerjee_et_al:DagSemRep.397,
  author =	{Banerjee, Anindya and Mantel, Heiko and Naumann, David A. and Sabelfeld, Andrei},
  title =	{{Language-Based Security (Dagstuhl Seminar 03411)}},
  pages =	{1--10},
  ISSN =	{1619-0203},
  year =	{2003},
  type = 	{Dagstuhl Seminar Report},
  number =	{397},
  institution =	{Schloss Dagstuhl -- Leibniz-Zentrum f{\"u}r Informatik},
  publisher =	{Schloss Dagstuhl -- Leibniz-Zentrum f{\"u}r Informatik},
  address =	{Dagstuhl, Germany},
  URL =		{https://drops.dagstuhl.de/entities/document/10.4230/DagSemRep.397},
  URN =		{urn:nbn:de:0030-drops-152779},
  doi =		{10.4230/DagSemRep.397},
}
  • Refine by Type
  • 7 Document/PDF
  • 1 Document/HTML

  • Refine by Publication Year
  • 1 2025
  • 1 2013
  • 2 2007
  • 2 2005
  • 1 2003

  • Refine by Author
  • 6 Sabelfeld, Andrei
  • 5 Mantel, Heiko
  • 3 Banerjee, Anindya
  • 2 Barthe, Gilles
  • 2 Myers, Andrew C.
  • Show More...

  • Refine by Series/Journal
  • 1 LIPIcs
  • 1 DagRep
  • 1 DagSemRep
  • 4 DagSemProc

  • Refine by Classification
  • 1 Information systems → Web applications
  • 1 Security and privacy → Information flow control
  • 1 Software and its engineering → Dynamic analysis
  • 1 Software and its engineering → Object oriented frameworks

  • Refine by Keyword
  • 4 information flow
  • 2 Access control
  • 2 Mobility
  • 2 availability
  • 2 confidentiality
  • Show More...

Any Issues?
X

Feedback on the Current Page

CAPTCHA

Thanks for your feedback!

Feedback submitted to Dagstuhl Publishing

Could not send message

Please try again later or send an E-mail
© 2023-2026 Schloss Dagstuhl – LZI GmbH Schloss Dagstuhl – LZI GmbH About DROPS Imprint Privacy Contact