• Journal of Internet Computing and Services
    ISSN 2287 - 1136 (Online) / ISSN 1598 - 0170 (Print)
    https://jics.or.kr/

The Real-Time Detection of the Malicious JavaScript


Hyun-Lock Choo, Jong-Hun Jung, Hwan-Kuk Kim, Journal of Internet Computing and Services, Vol. 16, No. 4, pp. 51-60, Aug. 2015
10.7472/jksii.2015.16.4.51, Full Text:
Keywords: Malicious JavaScript, Analysis Engine, Static Analysis, Dynamic Analysis, Script-Based Cyber Attack

Abstract

JavaScript is a popular technique for activating static HTML. JavaScript has drawn more attention following the introduction of HTML5 Standard. In proportion to JavaScript's growing importance, attacks (ex. DDos, Information leak using its function) become more dangerous. Since these attacks do not create a trail, whether the JavaScript code is malicious or not must be decided. The real attack action is completed while the browser runs the JavaScript code. For these reasons, there is a need for a real-time classification and determination technique for malicious JavaScript. This paper proposes the Analysis Engine for detecting malicious JavaScript by adopting the requirements above. The analysis engine performs static analysis using signature-based detection and dynamic analysis using behavior-based detection. Static analysis can detect malicious JavaScript code, whereas dynamic analysis can detect the action of the JavaScript code.


Statistics
Show / Hide Statistics

Statistics (Cumulative Counts from November 1st, 2017)
Multiple requests among the same browser session are counted as one view.
If you mouse over a chart, the values of data points will be shown.


Cite this article
[APA Style]
Choo, H., Jung, J., & Kim, H. (2015). The Real-Time Detection of the Malicious JavaScript. Journal of Internet Computing and Services, 16(4), 51-60. DOI: 10.7472/jksii.2015.16.4.51.

[IEEE Style]
H. Choo, J. Jung, H. Kim, "The Real-Time Detection of the Malicious JavaScript," Journal of Internet Computing and Services, vol. 16, no. 4, pp. 51-60, 2015. DOI: 10.7472/jksii.2015.16.4.51.

[ACM Style]
Hyun-Lock Choo, Jong-Hun Jung, and Hwan-Kuk Kim. 2015. The Real-Time Detection of the Malicious JavaScript. Journal of Internet Computing and Services, 16, 4, (2015), 51-60. DOI: 10.7472/jksii.2015.16.4.51.