Detection of Malicious Obfuscated Code in Websites Using its Characteristics.

Apply

Detection of Malicious Obfuscated Code in Websites Using its Characteristics.

Journal Title: Jaunųjų mokslininkų darbai - Year 2011, Vol 31, Issue 2

Abstract

The growth in the popularity of the web has been matched by a rapid increase in the number of reported vulnerabilities, so the fight against malware and its detection in websites is becoming increasingly important. In order to increase the survival of the malware and to extend its lifetime some techniques are used to hide and obfuscate malicious code. Developers can protect the program or ensure its security when transmitting the program via network, using JavaScript obfuscation methods that include variable name obfuscation and/or code content obfuscation. In this paper obfuscated JavaScript code detection method is described, which is based on obfuscated code characteristics and uses three search criteria: word length, number of special chars in word and frequency of chars in word. Using this method a research was carried out, whose results show the effectiveness of the proposed method – the reached accuracy of obfuscated code detection was 98 percent.

Authors and Affiliations

Linas Ladyga, Jonas Juknius

Keywords

virus Malware Botnet obfuscated JavaScript code malicious code detection methods obfuscated code detector.

EP ID EP108525
DOI -
Views 104
Downloads 0