On improvements of robustness of obfuscated Java']JavaScript code detection

被引:0
|
作者
Ponomarenko, G. S. [1 ]
Klyucharev, P. G. [1 ]
机构
[1] Bauman Moscow State Tech Univ, Moscow, Russia
关键词
obfuscation detection; obfuscator model classification; !text type='java']java[!/text]script obfuscation; !text type='java']java[!/text]script minification; machine learning for software engineering; MALICIOUS [!text type='JAVA']JAVA[!/text]SCRIPT; CLASSIFICATION;
D O I
10.1007/s11416-022-00450-1
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
This paper is dedicated to the problem of design of the detector for obfuscated JavaScript code using machine learning technologies. The main challenge was to design models that would be robust against obfuscators that the model got not familiar with during the training process. During the research we were trying to simulate the scenario when the obfuscation detector, trained to detect samples obfuscated by the specific obfuscators, is given samples that were processed by some another obfuscator. The presented approach of the feature engineering and model training allowed to get better accuracy on the previously unseen obfuscators comparing to the reference work. It was shown that treating minified code samples as obfuscated, as well as enriching the set of the lexical and syntactical features could improve detector's quality.
引用
收藏
页码:387 / 398
页数:12
相关论文
共 50 条
  • [1] On improvements of robustness of obfuscated JavaScript code detection
    G. S. Ponomarenko
    P. G. Klyucharev
    Journal of Computer Virology and Hacking Techniques, 2023, 19 : 387 - 398
  • [2] Detection of Obfuscated Malicious Java']JavaScript Code
    Alazab, Ammar
    Khraisat, Ansam
    Alazab, Moutaz
    Singh, Sarabjot
    FUTURE INTERNET, 2022, 14 (08):
  • [3] A Half-Dynamic Classification Method on Obfuscated Malicious Java']JavaScript Detection
    Fang, Zhaolin
    Zhu, Renhuan
    Zhang, Weihui
    Chen, Bo
    INTERNATIONAL JOURNAL OF SECURITY AND ITS APPLICATIONS, 2015, 9 (06): : 251 - 262
  • [4] Analysis and Identification of Malicious Java']JavaScript Code
    Fraiwan, Mohammad
    Al-Salman, Rami
    Khasawneh, Natheer
    Conrad, Stefan
    INFORMATION SECURITY JOURNAL, 2012, 21 (01): : 1 - 11
  • [5] Detection of malicious java']javascript on an imbalanced dataset
    Phung, Ngoc Minh
    Mimura, Mamoru
    INTERNET OF THINGS, 2021, 13
  • [6] JS']JStrong: Malicious Java']JavaScript detection based on code semantic representation and graph neural network
    Fang, Yong
    Huang, Chaoyi
    Zeng, Minchuan
    Zhao, Zhiying
    Huang, Cheng
    COMPUTERS & SECURITY, 2022, 118
  • [7] Malicious Java']JavaScript Detection Based on Bidirectional LSTM Model
    Song, Xuyan
    Chen, Chen
    Cui, Baojiang
    Fu, Junsong
    APPLIED SCIENCES-BASEL, 2020, 10 (10):
  • [8] ZipAST: Enhancing malicious Java']JavaScript detection with sequence compression
    Chen, Zixian
    Wang, Weiping
    Qin, Yan
    Zhang, Shigeng
    COMPUTERS & SECURITY, 2025, 153
  • [9] Static Detection of Malicious Java']JavaScript-Bearing PDF Documents
    Laskov, Pavel
    Srndic, Nedim
    27TH ANNUAL COMPUTER SECURITY APPLICATIONS CONFERENCE (ACSAC 2011), 2011, : 373 - 382
  • [10] Detection and Mitigation Of Malicious Java']JavaScript Using Information Flow Control
    Sayed, Bassam
    Traore, Issa
    Abdelhalim, Amany
    2014 TWELFTH ANNUAL INTERNATIONAL CONFERENCE ON PRIVACY, SECURITY AND TRUST (PST), 2014, : 264 - 273