Title
Detecting Obfuscated Suspicious JavaScript Based on Information-Theoretic Measures and Novelty Detection.
Abstract
It is common for attackers to launch famous Drive-by-download attacks by using malicious JavaScript on the Internet. In a typical case, attackers compromise legitimate websites and inject malicious JavaScript which is used to bounce the visitors to other pre-set malicious pages and infect them. In order to evade detectors, attackers obfuscate their malicious JavaScript so that the maliciousness can be hidden. In this paper, we propose a new approach for detecting suspicious obfuscated JavaScript based on information-theoretic measures and the idea of novelty detection. According to results of experiments, it can be seen the new system improves several potential weaknesses of previous systems.
Year
Venue
Field
2015
ICISC
Novelty detection,World Wide Web,Computer science,Obfuscation,The Internet,JavaScript
DocType
Citations 
PageRank 
Conference
1
0.41
References 
Authors
3
4
Name
Order
Citations
PageRank
Jia-Wei Su11628.30
Katsunari Yoshioka214722.92
Junji Shikata320934.44
Tsutomu Matsumoto41156197.58