Obfuscated JavaScript Code Detection using Machine Learning with AST-based Syntactic and Lexical Analysis

Eren Kiliç*, Mehmet Tahir Sandikkaya

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

1 Citation (Scopus)

Abstract

Obfuscation has become a popular technique used by attackers to hide malicious code in JavaScript applications. The detection of obfuscated code in JavaScript is a challenging task. A survey of existing techniques for obfuscation detection in JavaScript is presented. The existing detection techniques, including static and dynamic analysis, are also reviewed. Furthermore, we propose a novel approach that combines both static and dynamic analysis to improve the accuracy of obfuscation detection in JavaScript. Our approach is based on the idea of detecting suspicious code patterns that are commonly used in obfuscated code using syntactic and lexical analysis. Finally, we evaluate the effectiveness of our proposed approach using a data set of real-world JavaScript applications. The results show that our approach can achieve a high level of accuracy in detecting obfuscated code, outperforming existing techniques in terms of both detection rate and false positive rate.

Original languageEnglish
Title of host publication2023 8th International Conference on Smart and Sustainable Technologies, SpliTech 2023
EditorsPetar Solic, Sandro Nizetic, Joel J. P. C. Rodrigues, Joel J. P. C. Rodrigues, Joel J. P. C. Rodrigues, Diego Lopez-de-Ipina Gonzalez-de-Artaza, Toni Perkovic, Luca Catarinucci, Luigi Patrono
PublisherInstitute of Electrical and Electronics Engineers Inc.
ISBN (Electronic)9789532901283
DOIs
Publication statusPublished - 2023
Event8th International Conference on Smart and Sustainable Technologies, SpliTech 2023 - Hybrid, Split/Bol, Croatia
Duration: 20 Jun 202323 Jun 2023

Publication series

Name2023 8th International Conference on Smart and Sustainable Technologies, SpliTech 2023

Conference

Conference8th International Conference on Smart and Sustainable Technologies, SpliTech 2023
Country/TerritoryCroatia
CityHybrid, Split/Bol
Period20/06/2323/06/23

Bibliographical note

Publisher Copyright:
© 2023 University of Split, FESB.

Keywords

  • abstract syntax tree
  • binary classification
  • JavaScript
  • machine learning
  • natural language processing
  • obfuscation
  • obfuscation detection

Fingerprint

Dive into the research topics of 'Obfuscated JavaScript Code Detection using Machine Learning with AST-based Syntactic and Lexical Analysis'. Together they form a unique fingerprint.

Cite this