A Cloud-based Protection approach against JavaScript-based attacks to browsers

Fu‐Hau Hsu

doi:10.1016/j.compeleceng.2018.03.050

A Cloud-based Protection approach against JavaScript-based attacks to browsers

2018-05-01

1

PRE

AI

DOI：10.1016/j.compeleceng.2018.03.050

原文链接

原文求助

摘要

En 中文

JavaScript is a standard of client-side scripting languages. Due to its cross-platform property, JavaScript is widely used in web pages. Hence its security problems can seriously influence the security of devices executing code written by it. This paper proposes a Cloud-based Protection approach against JavaScript-based attacks to browsers, called CPJ. CPJ provides timely and effective protection to web browsers to cope with attackers' continuously developing new JavaScript-based attack approaches. CPJ integrates VirusTotal, a cloud-based security analysis service, into a browser. Therefore, with the latest malware signature databases, it can analyze the behavior of a variety of JavaScript files. It allows a browser to block malicious code when the browser is surfing the Internet. We demonstrate its feasibility using Internet experiments, and show its effectiveness on a variety of suspicious targets. According to our experiments, CPJ has rather good sensitivity and performance.

Keyword:

Web security

Malicious JavaScript

VirusTotal

Cloud-based Protection

A Cloud-based Protection approach against JavaScript-based attacks to browsers

摘要

AI总结

期刊

机构

引用论文