Analysis and Identification of Malicious JavaScript Code

Information Security Journal

Volumn 21, Issue 1, 2012, Pages 1-11

  Fraiwan, Mohammad ^a   Al Salman, Rami ^a   Khasawneh, Natheer ^a   Conrad, Stefan ^b  

^a JORDAN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Jordan)

^b HEINRICH HEINE UNIVERSITY   (Germany)

Author keywords

classification; malicious JavaScript; Web testing

Indexed keywords

CROSS-SITE SCRIPTING; DATA SETS; DETECTION ACCURACY; DETECTION APPROACH; FALSE NEGATIVES; FALSE POSITIVE; JAVASCRIPT; KEY FEATURE; MALICIOUS CODES; PERFORMANCE EVALUATION; PHISHING ATTACKS; SECURITY ATTACKS; WEB TESTING;

CLASSIFICATION (OF INFORMATION); HIGH LEVEL LANGUAGES; WEBSITES;

JAVA PROGRAMMING LANGUAGE;

EID: 84858811097     PISSN: 19393555     EISSN: 19393547     Source Type: Journal    
DOI: 10.1080/19393555.2011.624160     Document Type: Article

References (22)

1. Twitter scrambles to block worms. (2010, September 21). BBC News Technology http://www.bbc.co.uk/news/technology-11382469 (http://www.bbc.co.uk/news/technology-11382469)
2. Ma, J., Saul, L., Savage, S. and Voelker, M. 2009. Beyond blacklists: Learning to detect malicious Web sites from suspicious URLs. In Proceedings of the 15th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining Paris, France
3. PhishTank: A collaborative clearing house for data and Information about Phishing on the Internet. (n.d.) www.phishtank.com/
4. Moore, T., Clayton, R. and Stern, H. 2009. "Temporal correlations between spam and Phishing Web sites". In In Proceedings of the 2nd USENIX Workshop on Large-Scale Exploits and Emergent Threats
5. Holz, T., Gorecki, C., Rieck, K. and Freiling, F. 2008. "Measuring and detecting fast-flux service networks". In In Proceedings of the 15th Network & Distributed System Security Symposium (NDSS)
6. Hallaraker, O. and Vigna, G. 2005. Detecting malicious JavaScript code in Mozilla, Washington, DC: Proceedings of the 10th IEEE International Conference on Engineering of Complex Computer Systems.
7. Likarish, P. and Jung, E. 2009. A targeted Web crawling for building malicious JavaScript collection, Hong Kong, China: Proceeding of the ACM First International Workshop on Data-intensive Software Management and Mining.
8. Kolter, Z. and Maloof, M. 2006. Learning to detect and classify malicious executables in the wild. Journal of Machine Learning Research,: 7
9. Feinstein, B. and Peck, C. 2007. Caffeine monkey: Automated collection, Black Hat: detection and analysis of malicious JavaScript.
10. Mozilla C implementation of JavaScript. (n.d.) http://www.mozilla.org/js/spidermonkey/
11. google-caja: A source-to-source translator for securing JavaScript based Web content. (n.d.) http://www.code.google.com/p/google-caja/
12. Dewar, A., Holz, T. and Freiling, F. 2010. ADSandbox: Sandboxing JavaScript to fight malicious Web sites, Sierre, Switzerland: Symposium on Applied Computing (SAC).
13. Jim, T., Swamy, N. and Hicks, M. 2007. "Defeating Script injection attacks with browser enforced embedded policies". In In 16th International World Wide Web Conference
14. Likarish, P., Jung, E. and Jo, I. 2009. "Obfuscated malicious JavaScript detection using classification techniques". In In 4th International Conference on Malicious and Unwanted Software (MLWARE)
15. Free traffic metrics, search analytics, demographics, and more for Websites. (n.d.) www.alexa.com/
16. Sphider: PHP search engine. (n.d.) http://www.sphider.eu/
17. Cova, M., Kruegel, C. and Vigna, G. 2010. Detection and analysis of drive-by-download attacks and malicious JavaScript code, North Carolina: In Proceedings of WWW 2010 Conference.
18. Java Script Debugger Mozilla Firefox add-on. (n.d.) https://addons.mozilla.org/firefox/addon/216
19. Firebug development tool Mozilla Firefox add-on. (n.d.) https://addons.mozilla.org/firefox/addon/1843
20. Weka 3: Data mining software in Java. (n.d.) www.cs.waikato.ac.nz/ml/weka/
21. The phpMyAdmin tool. (n.d.) http://www.phpmyadmin.net/home_page/index.php.
22. Yue, C. and Wang, H. Characterizing insecure JavaScript practices on the Web In Proceedings of WWW 2009 Conference. Madrid, Spain