.png){kind=icon}
返回
Detecting malicious JavaScript code based on semantic analysis
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2020.101764.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Web development technology has undergone tremendous evolution, the creation of JavaScript has greatly enriched the interactive capabilities of the client. However, attackers use the dynamics feature of JavaScript language to embed malicious code into web pages for the purpose of drive-by-download, redirection, etc. The traditional method based on static feature detection is difficult to detect the malicious code after obfuscation, and the method based on dynamic analysis has low efficiency. To overcome these challenges, this paper proposes a static detection model based on semantic analysis. The model firstly generates an abstract syntax tree from JavaScript source codes, then automatically converts them to syntactic unit sequences. FastText algorithm is introduced to training word vectors. The syntactic unit sequences are represented as word vectors which will be input into Bi-LSTM network with attention mechanism. The detection model with Bi-LSTM network with attention mechanism is the key to detect malicious JavaScript. We experimented with the dataset using a five-fold cross-validation method. Experiments showed that the model can effectively detect obfuscated malicious JavaScript code and improve the detection speed, with a precision of 0.977 and recall of 0.974. (C) 2020 Elsevier Ltd. All rights reserved.
Keyword:
Malicious JavaScript detection
Abstract syntax tree
Attention mechanism
Static analysis
Bi-LSTM
FastText
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.7W
机构
引用论文
分享收藏分享收藏分享收藏Framewise phoneme classification with bidirectional LSTM and other neural network architectures.png)
NEURAL NETWORKS
NEURAL NETWORKSIF6.3
PREAI
分享收藏Exploring Permission-Induced Risk in Android Applications for Malicious Application DetectionAndroid应用中权限诱发风险的恶意应用检测研究
PREAI
分享收藏
查看更多内容