Poster: Detecting webassembly-based cryptocurrency mining

Bian, Weikang1; Meng, Wei1; Wang, Yi2

10.1145/3319535.3363287

2019

1543-7221

26th ACM SIGSAC Conference on Computer and Communications Security, CCS 2019

2685-2687

London, United kingdom

1515 BROADWAY, NEW YORK, NY 10036-9998 USA

Association for Computing Machinery

In-browser cryptojacking is an emerging threat to web users. The attackers can abuse the users' computation resources to perform cryptocurrency mining without obtaining their consent. Moreover, the new web feature -WebAssembly (Wasm)- enables efficient in-browser cryptocurrency mining and has been commonly used in mining applications. In this work, we use the dynamic Wasm instruction execution trace to model the behavior of different Wasm applications. We observe that the cryptocurrency mining Wasm programs exhibit very different execution traces from other Wasm programs (e.g., games). Based on our findings, we propose a novel browser-based methodology to detect in-browser Wasm-based cryptojacking.
© 2019 Association for Computing Machinery.

WebAssembly Cryptojacking Cryptocurrency mining

其他

英语

EI ; CPCI-S

Research Grants Council, University Grants Committee[CUHK 24209418]

Computer Science ; Telecommunications

Computer Science, Information Systems ; Computer Science, Theory & Methods ; Telecommunications

WOS:000509760700192

20195007799443

Data privacy ; Security of data

Data Processing and Image Processing:723.2 ; Computer Applications:723.5

EV Compendex

1.Chinese University of Hong Kong, Hong Kong
2.Southern University of Science and Technology, China

Bian, Weikang,Meng, Wei,Wang, Yi. Poster: Detecting webassembly-based cryptocurrency mining[C]. 1515 BROADWAY, NEW YORK, NY 10036-9998 USA:Association for Computing Machinery,2019:2685-2687.