WEBRR: A Forensic System for Replaying and Investigating Web-Based Attacks in The Modern Web

Watch a 13-minute conference presentation from USENIX Security '24 exploring WebRR, a novel forensic system designed for investigating web-based attacks. Learn how this OS- and device-independent record and replay system for Chromium-based browsers enables forensic analysts to reconstruct and analyze sophisticated cyber attacks through JavaScript Execution Unit Partitioning. Discover how WebRR overcomes the limitations of traditional system-level auditing by bridging the semantic gap between system- and web-level semantics, allowing for deterministic replay of modern web applications with minimal performance impact. Examine the system's effectiveness in replaying attacks that defeat other state-of-the-art solutions, while maintaining an average runtime overhead of just 3.44%.