On improvements of robustness of obfuscated Java']JavaScript code detection

被引:0
|
作者
Ponomarenko, G. S. [1 ]
Klyucharev, P. G. [1 ]
机构
[1] Bauman Moscow State Tech Univ, Moscow, Russia
关键词
obfuscation detection; obfuscator model classification; !text type='java']java[!/text]script obfuscation; !text type='java']java[!/text]script minification; machine learning for software engineering; MALICIOUS [!text type='JAVA']JAVA[!/text]SCRIPT; CLASSIFICATION;
D O I
10.1007/s11416-022-00450-1
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
This paper is dedicated to the problem of design of the detector for obfuscated JavaScript code using machine learning technologies. The main challenge was to design models that would be robust against obfuscators that the model got not familiar with during the training process. During the research we were trying to simulate the scenario when the obfuscation detector, trained to detect samples obfuscated by the specific obfuscators, is given samples that were processed by some another obfuscator. The presented approach of the feature engineering and model training allowed to get better accuracy on the previously unseen obfuscators comparing to the reference work. It was shown that treating minified code samples as obfuscated, as well as enriching the set of the lexical and syntactical features could improve detector's quality.
引用
收藏
页码:387 / 398
页数:12
相关论文
共 50 条
  • [21] Lightweight Detection Method of Obfuscated Landing Sites Based on the AST Structure and Tokens
    Han, KyungHyun
    Hwang, Seong Oun
    APPLIED SCIENCES-BASEL, 2020, 10 (17):
  • [22] Denoising Adversarial Autoencoder for Obfuscated Traffic Detection and Recovery
    Salman, Ola
    Elhajj, Imad H.
    Kayssi, Ayman
    Chehab, Ali
    MACHINE LEARNING FOR NETWORKING (MLN 2019), 2020, 12081 : 99 - 116
  • [23] JS']JSRevealer: A Robust Malicious Java']JavaScript Detector against Obfuscation
    Ren, Kunlun
    Qiang, Weizhong
    Wu, Yueming
    Zhou, Yi
    Zou, Deqing
    Jin, Hai
    2023 53RD ANNUAL IEEE/IFIP INTERNATIONAL CONFERENCE ON DEPENDABLE SYSTEMS AND NETWORKS, DSN, 2023, : 339 - 351
  • [24] JS']JSDES - An Automated De-Obfuscation System for Malicious Java']JavaScript
    AbdelKhalek, Moataz
    Shosha, Ahmed
    PROCEEDINGS OF THE 12TH INTERNATIONAL CONFERENCE ON AVAILABILITY, RELIABILITY AND SECURITY (ARES 2017), 2017,
  • [25] Feature Space for Statistical Classification of Java']Java Source Code Patterns
    Mojzes, Matej
    Rost, Michal
    Smolka, Josef
    Virius, Miroslav
    2014 15TH INTERNATIONAL CARPATHIAN CONTROL CONFERENCE (ICCC), 2014, : 357 - 361
  • [26] JS']JSCleaner: De-Cluttering Mobile Webpages Through Java']JavaScript Cleanup
    Chaqfeh, Moumena
    Zaki, Yasir
    Hu, Jacinta
    Subramanian, Lakshmi
    WEB CONFERENCE 2020: PROCEEDINGS OF THE WORLD WIDE WEB CONFERENCE (WWW 2020), 2020, : 763 - 773
  • [27] A Cloud-based Protection approach against Java']JavaScript-based attacks to browsers
    Hsu, Fu-Hau
    Hwang, Yan-Ling
    Lee, Chia-Hao
    Lin, Chieh-Ju
    Chang, KaiWei
    Huang, Chen-Chia
    COMPUTERS & ELECTRICAL ENGINEERING, 2018, 68 : 241 - 251
  • [28] To Block or Not to Block: Accelerating Mobile Web Pages On-The-Fly Through Java']JavaScript Classification
    Chaqfeh, Moumena
    Haseeb, Muhammad
    Hashmi, Waleed
    Inshuti, Patrick
    Ramesh, Manesha
    Varvello, Matteo
    Subramanian, Lakshmi
    Zaffar, Fareed
    Zaki, Yasir
    PROCEEDINGS OF THE 2022 INTERNATIONAL CONFERENCE ON INFORMATION AND COMMUNICATION TECHNOLOGIES AND DEVELOPMENT, ICTD 2022, 2022,
  • [29] Obfuscated Mobile Malware Detection by Means of Dynamic Analysis and Explainable Deep Learning
    Mercaldo, Francesco
    Ciaramella, Giovanni
    Santone, Antonella
    Martinelli, Fabio
    18TH INTERNATIONAL CONFERENCE ON AVAILABILITY, RELIABILITY & SECURITY, ARES 2023, 2023,
  • [30] On the adversarial robustness of aerial detection
    Chen, Yuwei
    Chu, Shiyong
    FRONTIERS IN COMPUTER SCIENCE, 2024, 6