WASMixer: Binary Obfuscation for WebAssembly

TL;DR

WASMixer is a pioneering tool that provides comprehensive obfuscation for WebAssembly binaries, enhancing their security against reverse engineering and analysis.

Contribution

It introduces the first general-purpose WebAssembly binary obfuscator with techniques for data and code-level protection, addressing a critical security gap.

Findings

Successfully obfuscates Wasm binaries with minimal performance impact

Proves effectiveness through extensive experiments

Enhances security against reverse engineering

Abstract

WebAssembly (Wasm) is an emerging binary format that draws great attention from our community. However, Wasm binaries are weakly protected, as they can be read, edited, and manipulated by adversaries using either the officially provided readable text format (i.e., wat) or some advanced binary analysis tools. Reverse engineering of Wasm binaries is often used for nefarious intentions, e.g., identifying and exploiting both classic vulnerabilities and Wasm specific vulnerabilities exposed in the binaries. However, no Wasm-specific obfuscator is available in our community to secure the Wasm binaries. To fill the gap, in this paper, we present WASMixer, the first general-purpose Wasm binary obfuscator, enforcing data-level (string literals and function names) and code-level (control flow and instructions) obfuscation for Wasm binaries. We propose a series of key techniques to overcome challenges during Wasm binary rewriting, including an on-demand decryption method to minimize the impact brought by decrypting the data in memory area, and code splitting/reconstructing algorithms to handle structured control flow in Wasm. Extensive experiments demonstrate the correctness, effectiveness and efficiency of WASMixer. Our research has shed light on the promising direction of Wasm binary research, including Wasm code protection, Wasm binary diversification, and the attack-defense arm race of Wasm binaries.