A Static Malicious Javascript Detection Using SVM

Abstract

Malicious script,such as JavaScript, is one of the primary threats of the network security. JavaScript is not only a browser scripting language that allows developers to create sophisticated client-side interfaces for web applications, but also used to carry out attacks taht used to steal users' credentials and lure users into providing sensitive information to unauthorized parties. We propose a static malicious JavaScript detection techniques based on SVM(Support Vector Machine). Our approach combines static detection with machine learning technique, to analyze and extract malicious script features,and use the machine learning technology,SVM, to classify the scripts.This technique has the characteristics of high detection rate,low false positive rate and the detection of unknown attacks. Applied to experiments on the prepared data set, we achieved excellent detection performance.