arrow
返回

JStrong: Malicious JavaScript detection based on code semantic representation and graph neural network

delete2022-07-01
delete12
PRE
AI
方
方勇 (Yong Fang)
C
Chaoyi Huang
M
Minchuan Zeng
Z
Zhiying Zhao
C
Cheng Huang *
DOI:10.1016/j.cose.2022.102715delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Web development technology has experienced significant progress. The creation of JavaScript has highly enriched the interactive ability of the client. However, the attacker uses the dynamic characteristics of the JavaScript language to embed malicious code into web pages to achieve the purpose of smuggling, redirection, and so on. Traditional methods based on static feature detection are therefore difficult to detect malicious code after confusion, and the method based on dynamic analysis is inefficient. To meet these challenges, this paper proposes a static detection model JStrong based on graph neural network. The model first generates an abstract syntax tree from the JavaScript source code, and then adds data flow and control flow information into the program dependency graph. In addition, we embed the nodes and edges of the graph into the feature vector and fully learn the features of the whole graph through the graph neural network. We take advantage of a real-world dataset collected from the top website and GitHub to evaluate JStrong and compare it to the state-of-the-art method. Experimental results show that JStrong achieves near-perfect classification performance and is superior to the state-of-the-art method.(c) 2022 Elsevier Ltd. All rights reserved.
Keyword:
Malicious JavaScript
Code representation
Graph neural network
Program dependency graph
Scripts detection

期刊

C
Computers and Security
IF:
5.4
论文数:
4.6K
被引数:
1.4W

机构

S
sichuan university
学者数:
12.1W
论文数: 7.8W
被引数: 100
引用论文

引用论文

err分享
err收藏
JSContana: Malicious JavaScript detection using adaptable context analysis and key feature extraction
err2021-05-01
err21
PREAI
errHuang, Yunhua; Li, Tao; Zhang, Lijia; Li, Beibei; Liu, Xiaojie
err分享
err收藏
Detecting malicious JavaScript code based on semantic analysis
err2020-06-01
err22
PREAI
errFang, Yong; Huang, Cheng; Su, Yu; Qiu, Yaoyao
err分享
err收藏
Combining Graph-Based Learning With Automated Data Collection for Code Vulnerability Detection基于图的学习与自动数据收集相结合的代码漏洞检测
err2021-01-01
err166
errOAAI
errWang, Huanting; Ye, Guixin; Tang, Zhanyong; Tan, Shin Hwei; Huang, Songfang; Fang, Dingyi; Feng, Yansong; Bian, Lizhong; Wang, Zheng
err分享
err收藏
没有更多内容