A survey on current malicious javascript behavior of infected web content in detection of malicious web pages

In recent years, the advance growth of cybercrime has become an urgent issue to the security authorities. With the improvement of web technologies enable attackers to launch the web-based attacks and other malicious code easily without having prior expert knowledge. Recently, JavaScript has become t...

Full description

Bibliographic Details
Main Authors: Wan Nurulsafawati, Wan Manan, Mohd Nizam, Mohmad Kahar, Noorlin, Mohd Ali
Format: Conference or Workshop Item
Language:English
Published: IOP Publishing 2020
Subjects:
Online Access:http://umpir.ump.edu.my/id/eprint/28809/
http://umpir.ump.edu.my/id/eprint/28809/1/A%20survey%20on%20current%20malicious%20javascript%20behavior%20of%20infected.pdf
_version_ 1848823140516364288
author Wan Nurulsafawati, Wan Manan
Mohd Nizam, Mohmad Kahar
Noorlin, Mohd Ali
author_facet Wan Nurulsafawati, Wan Manan
Mohd Nizam, Mohmad Kahar
Noorlin, Mohd Ali
author_sort Wan Nurulsafawati, Wan Manan
building UMP Institutional Repository
collection Online Access
description In recent years, the advance growth of cybercrime has become an urgent issue to the security authorities. With the improvement of web technologies enable attackers to launch the web-based attacks and other malicious code easily without having prior expert knowledge. Recently, JavaScript has become the most common attack construction language as it is the primary browser scripting language which allow developer to develop sophisticated client-side interfaces for web application. This lead to the growth of malicious websites and as main platform for distributing malware or malicious script to the user's computer when the user access to these webpages. Initial act and detection on such threats early in a timely manner is vital in order to reduce the damages which have caused billions of dollars lost every year. A number of approaches have been proposed to detect malicious web pages. However, the efficient detection of malicious web pages previously has generated many false alarm by the use of sophisticated obfuscation techniques in benign JavaScript code in web pages. Therefore, in this paper, a thoroughly survey and detailed understanding of malicious JavaScript code features will be provided, which have been collected from the web content. We conduct a thorough analysis and studies on the usage of different JavaScript features and JavaScript detection technique systematically and present the most important features of malicious threats in web pages. Then the analysis will be presented along with different dimensions (features representation, detection techniques analysis, and sample of malicious script).
first_indexed 2025-11-15T02:52:24Z
format Conference or Workshop Item
id ump-28809
institution Universiti Malaysia Pahang
institution_category Local University
language English
last_indexed 2025-11-15T02:52:24Z
publishDate 2020
publisher IOP Publishing
recordtype eprints
repository_type Digital Repository
spelling ump-288092022-11-17T07:58:26Z http://umpir.ump.edu.my/id/eprint/28809/ A survey on current malicious javascript behavior of infected web content in detection of malicious web pages Wan Nurulsafawati, Wan Manan Mohd Nizam, Mohmad Kahar Noorlin, Mohd Ali QA76 Computer software TK Electrical engineering. Electronics Nuclear engineering In recent years, the advance growth of cybercrime has become an urgent issue to the security authorities. With the improvement of web technologies enable attackers to launch the web-based attacks and other malicious code easily without having prior expert knowledge. Recently, JavaScript has become the most common attack construction language as it is the primary browser scripting language which allow developer to develop sophisticated client-side interfaces for web application. This lead to the growth of malicious websites and as main platform for distributing malware or malicious script to the user's computer when the user access to these webpages. Initial act and detection on such threats early in a timely manner is vital in order to reduce the damages which have caused billions of dollars lost every year. A number of approaches have been proposed to detect malicious web pages. However, the efficient detection of malicious web pages previously has generated many false alarm by the use of sophisticated obfuscation techniques in benign JavaScript code in web pages. Therefore, in this paper, a thoroughly survey and detailed understanding of malicious JavaScript code features will be provided, which have been collected from the web content. We conduct a thorough analysis and studies on the usage of different JavaScript features and JavaScript detection technique systematically and present the most important features of malicious threats in web pages. Then the analysis will be presented along with different dimensions (features representation, detection techniques analysis, and sample of malicious script). IOP Publishing 2020-06-05 Conference or Workshop Item PeerReviewed pdf en cc_by http://umpir.ump.edu.my/id/eprint/28809/1/A%20survey%20on%20current%20malicious%20javascript%20behavior%20of%20infected.pdf Wan Nurulsafawati, Wan Manan and Mohd Nizam, Mohmad Kahar and Noorlin, Mohd Ali (2020) A survey on current malicious javascript behavior of infected web content in detection of malicious web pages. In: IOP Conference Series: Materials Science and Engineering, 6th International Conference on Software Engineering and Computer Systems, ICSECS 2019 , 25 - 27 September 2019 , Vistana Hotel, Kuantan. pp. 1-9., 769 (1). ISSN 1757-8981 (Print), 1757-899X (Online) (Published) https://doi.org/10.1088/1757-899X/769/1/012074
spellingShingle QA76 Computer software
TK Electrical engineering. Electronics Nuclear engineering
Wan Nurulsafawati, Wan Manan
Mohd Nizam, Mohmad Kahar
Noorlin, Mohd Ali
A survey on current malicious javascript behavior of infected web content in detection of malicious web pages
title A survey on current malicious javascript behavior of infected web content in detection of malicious web pages
title_full A survey on current malicious javascript behavior of infected web content in detection of malicious web pages
title_fullStr A survey on current malicious javascript behavior of infected web content in detection of malicious web pages
title_full_unstemmed A survey on current malicious javascript behavior of infected web content in detection of malicious web pages
title_short A survey on current malicious javascript behavior of infected web content in detection of malicious web pages
title_sort survey on current malicious javascript behavior of infected web content in detection of malicious web pages
topic QA76 Computer software
TK Electrical engineering. Electronics Nuclear engineering
url http://umpir.ump.edu.my/id/eprint/28809/
http://umpir.ump.edu.my/id/eprint/28809/
http://umpir.ump.edu.my/id/eprint/28809/1/A%20survey%20on%20current%20malicious%20javascript%20behavior%20of%20infected.pdf