JSProtect: A Scalable Obfuscation Framework for Mini-Games in WeChat
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , , , , , , , , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2025
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866911183649374208 |
|---|---|
| author | Li, Zhihao Wang, Chaozheng Li, Zongjie Peng, Xinyong Su, Zelin Xia, Qun Lu, Haochuan Xiong, Ting Lam, Man Ho Gao, Shuzheng Xie, Yuchong Gao, Cuiyun Wang, Shuai Deng, Yuetang Ma, Huafeng |
| author_facet | Li, Zhihao Wang, Chaozheng Li, Zongjie Peng, Xinyong Su, Zelin Xia, Qun Lu, Haochuan Xiong, Ting Lam, Man Ho Gao, Shuzheng Xie, Yuchong Gao, Cuiyun Wang, Shuai Deng, Yuetang Ma, Huafeng |
| contents | The WeChat mini-game ecosystem faces rampant intellectual property theft to other platforms via secondary development, yet existing JavaScript obfuscation tools are ill-equipped for large-scale applications, suffering from prohibitive processing times, severe runtime performance degradation, and unsustainable code size inflation. This paper introduces JSProtect, a high-throughput parallelized obfuscation framework designed to overcome these fundamental limitations. At the core of our framework is the Parallel-Aware Scope Analysis (PASA) algorithm, which enables two key optimizations: independent code partitioning for multi-core processing and independent namespace management that aggressively reuses short identifiers to combat code bloat. Our evaluation demonstrates that JSProtectprocesses 20MB codebases in minutes, maintaining 100\% semantic equivalence while controlling code size inflation to as low as 20\% compared to over 1,000\% with baseline tools. Furthermore, it preserves near-native runtime performance and provides superior security effectiveness against both static analysis tools and large language models. This work presents a new paradigm for industrial-scale JavaScript protection that effectively balances robust security with high performance and scalability. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2509_24498 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | JSProtect: A Scalable Obfuscation Framework for Mini-Games in WeChat Li, Zhihao Wang, Chaozheng Li, Zongjie Peng, Xinyong Su, Zelin Xia, Qun Lu, Haochuan Xiong, Ting Lam, Man Ho Gao, Shuzheng Xie, Yuchong Gao, Cuiyun Wang, Shuai Deng, Yuetang Ma, Huafeng Software Engineering The WeChat mini-game ecosystem faces rampant intellectual property theft to other platforms via secondary development, yet existing JavaScript obfuscation tools are ill-equipped for large-scale applications, suffering from prohibitive processing times, severe runtime performance degradation, and unsustainable code size inflation. This paper introduces JSProtect, a high-throughput parallelized obfuscation framework designed to overcome these fundamental limitations. At the core of our framework is the Parallel-Aware Scope Analysis (PASA) algorithm, which enables two key optimizations: independent code partitioning for multi-core processing and independent namespace management that aggressively reuses short identifiers to combat code bloat. Our evaluation demonstrates that JSProtectprocesses 20MB codebases in minutes, maintaining 100\% semantic equivalence while controlling code size inflation to as low as 20\% compared to over 1,000\% with baseline tools. Furthermore, it preserves near-native runtime performance and provides superior security effectiveness against both static analysis tools and large language models. This work presents a new paradigm for industrial-scale JavaScript protection that effectively balances robust security with high performance and scalability. |
| title | JSProtect: A Scalable Obfuscation Framework for Mini-Games in WeChat |
| topic | Software Engineering |
| url | https://arxiv.org/abs/2509.24498 |