- Tytuł:
- Malicious JavaScript Detection by Features Extraction
- Autorzy:
-
Canfora, G
Mercaldo, F
Visaggio, C A - Powiązania:
- https://bibliotekanauki.pl/articles/384083.pdf
- Data publikacji:
- 2014
- Wydawca:
- Politechnika Wrocławska. Oficyna Wydawnicza Politechniki Wrocławskiej
- Tematy:
-
JavaScript
detecting malicious
execution
external referenced domains
calls to JavaScript functions - Opis:
- In recent years, JavaScript-based attacks have become one of the most common and successful types of attack. Existing techniques for detecting malicious JavaScripts could fail for different reasons. Some techniques are tailored on specific kinds of attacks, and are ineffective for others. Some other techniques require costly computational resources to be implemented. Other techniques could be circumvented with evasion methods. This paper proposes a method for detecting malicious JavaScript code based on five features that capture different characteristics of a script: execution time, external referenced domains and calls to JavaScript functions. Mixing different types of features could result in a more effective detection technique, and overcome the limitations of existing tools created for identifying malicious JavaScript. The experimentation carried out suggests that a combination of these features is able to successfully detect malicious JavaScript code (in the best cases we obtained a precision of 0.979 and a recall of 0.978).
- Źródło:
-
e-Informatica Software Engineering Journal; 2014, 8, 1; 65-78
1897-7979 - Pojawia się w:
- e-Informatica Software Engineering Journal
- Dostawca treści:
- Biblioteka Nauki
Artykuł