Dynamic Analysis Extending a Shadow Runtime for Profit

on YouTube ↗22m

" summary

Prototype implements a spec-faithful shadow runtime as an analysis layer for Wastrumentation in Rust, mirroring WebAssembly semantics to expose the execution value stack, globals and linear memory. Built tools include a taint domain on the shadow stack that cuts taint overapproximation by 44% versus treating modules as black boxes, a portable debugger that reconstructs high-level scopes from DWARF, and a Chrome extension “shadow shell” that attaches to live wasm (wasm4 demo) and edits linear memory; current cost: nontrivial runtime overhead.

AI-written summary · about

" chapters (9)

1. 0:00Dynamic analysis intro
2. 1:04WebAssembly instrumentation
3. 2:30Event-local analysis limits
4. 5:00Wadow and shadow runtime
5. 7:07Jasmine taint analysis
6. 9:37Portable debugger demo
7. 15:38Shadow shell inspection
8. 19:41Validation and future work
9. 20:45Q&A

" related talks

• 35mModern Sandboxing: Using Web Assembly in JavaFrank Lyaruu · Voxxed Days Crete 2025
• 46mWebAssembly (Digging a bit deeper)Steve Klabnik · Open Source 101 at Home 2020
• 27mWebAssembly for Performant InteractivityMani Nilchiani · EmpireJS 2018
• 38mWebAssembly beyond the browserMete Atamel · Voxxed Days Thessaloniki 2023
• 24mMeta-tracing Interpreters in WebAssemblyAndrew Brown, Andrew Tolmach · WAW 2025
• 55mUsing WebAssembly to run, extend, and secure your .NET applicationNiels Tanis · NDC Porto 2023
• 13mWebAssembly & Syscalls: A Story in Tool-BuildingDaniel E Phillips · Cloud Native Wasm Day Europe 2023
• 26mSyscall Me by Your Name: Sandboxing Wasm ProgramsRyan Petrich · Cloud Native Wasm Day NA 2023