Our recent work "Dead Weight: Analyzing Code Bloat and Its Security Implications in WebAssembly Binaries" was presented at DIMVA 2026 in Chania, Greece.
We analyzed over 8,000 real-world WebAssembly binaries and found that 70-85% of compiled functions are never executed. Beyond just taking up space, this dead code leaves a large attack surface for indirect exploitation primitives.
Proceedings to appear in Springer LNCS.
Author preprint: https://www.pratikkamble.com/DIMVA2026_WasmBloat.pdf
Work done with my advisor Dr. Aravind Prakash. Thank you for the guidance and support.
#WebAssembly #SecurityResearch #BinaryAnalysis #DIMVA2026