{"id":"https://openalex.org/W2946804763","doi":"https://doi.org/10.1109/apsec.2018.00051","title":"Malicious JavaScript Code Detection Based on Hybrid Analysis","display_name":"Malicious JavaScript Code Detection Based on Hybrid Analysis","publication_year":2018,"publication_date":"2018-12-01","ids":{"openalex":"https://openalex.org/W2946804763","doi":"https://doi.org/10.1109/apsec.2018.00051","mag":"2946804763"},"language":"en","primary_location":{"id":"doi:10.1109/apsec.2018.00051","doi":"https://doi.org/10.1109/apsec.2018.00051","is_oa":false,"landing_page_url":"https://doi.org/10.1109/apsec.2018.00051","pdf_url":null,"source":{"id":"https://openalex.org/S4210216296","display_name":"Asia-Pacific Software Engineering Conference (APSEC)","issn_l":"1530-1362","issn":["1530-1362","2640-0715"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 25th Asia-Pacific Software Engineering Conference (APSEC)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027856081","display_name":"Xincheng He","orcid":"https://orcid.org/0000-0001-6986-0111","observed_orcids":["https://orcid.org/0000-0001-6986-0111"]},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xincheng He","raw_affiliation_strings":["State Key Laboratory for Novel Software Technology, Nanjing University, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory for Novel Software Technology, Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100781026","display_name":"Lei Xu","orcid":"https://orcid.org/0000-0001-9178-6640","observed_orcids":["https://orcid.org/0000-0001-9178-6640"]},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lei Xu","raw_affiliation_strings":["State Key Laboratory for Novel Software Technology, Nanjing University, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory for Novel Software Technology, Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051008938","display_name":"Chunliu Cha","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunliu Cha","raw_affiliation_strings":["State Key Laboratory for Novel Software Technology, Nanjing University, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory for Novel Software Technology, Nanjing University, Nanjing, China","institution_ids":["https://openalex.org/I881766915"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I881766915"],"apc_list":null,"apc_paid":null,"fwci":1.8786,"has_fulltext":false,"cited_by_count":29,"citation_normalized_percentile":{"value":0.86875,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"365","last_page":"374"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.353300005197525,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.353300005197525,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.30880001187324524,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.2581000030040741,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malicious-javascript-detection","display_name":"malicious JavaScript detection","score":0.9789999723434448},{"id":"https://openalex.org/keywords/javascript-obfuscation","display_name":"JavaScript obfuscation","score":0.847000002861023},{"id":"https://openalex.org/keywords/hybrid-static-dynamic-analysis","display_name":"hybrid static-dynamic analysis","score":0.9169999957084656},{"id":"https://openalex.org/keywords/dynamic-instrumentation","display_name":"dynamic instrumentation","score":0.8539999723434448},{"id":"https://openalex.org/keywords/syntactic-analysis","display_name":"syntactic analysis","score":0.7710000276565552},{"id":"https://openalex.org/keywords/web-attacks","display_name":"web attacks","score":0.6430000066757202},{"id":"https://openalex.org/keywords/browser-plugin","display_name":"browser plugin","score":0.9139999747276306},{"id":"https://openalex.org/keywords/malware-detection","display_name":"malware detection","score":0.41499999165534973}],"concepts":[{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.9331015944480896},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8429676294326782},{"id":"https://openalex.org/C198240166","wikidata":"https://www.wikidata.org/wiki/Q2298909","display_name":"Unobtrusive JavaScript","level":4,"score":0.8159237504005432},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.7523398399353027},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.5846728086471558},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.5455211997032166},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5297502279281616},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.49732664227485657},{"id":"https://openalex.org/C118530786","wikidata":"https://www.wikidata.org/wiki/Q1134732","display_name":"Instrumentation (computer programming)","level":2,"score":0.4464530050754547},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.43663260340690613},{"id":"https://openalex.org/C103048170","wikidata":"https://www.wikidata.org/wiki/Q725485","display_name":"Rich Internet application","level":3,"score":0.39212337136268616},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.35371047258377075},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3131163716316223},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2883298993110657},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27942702174186707},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/apsec.2018.00051","doi":"https://doi.org/10.1109/apsec.2018.00051","is_oa":false,"landing_page_url":"https://doi.org/10.1109/apsec.2018.00051","pdf_url":null,"source":{"id":"https://openalex.org/S4210216296","display_name":"Asia-Pacific Software Engineering Conference (APSEC)","issn_l":"1530-1362","issn":["1530-1362","2640-0715"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 25th Asia-Pacific Software Engineering Conference (APSEC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W1485337887","https://openalex.org/W1513123914","https://openalex.org/W1792275236","https://openalex.org/W1976526581","https://openalex.org/W1983195562","https://openalex.org/W1987644478","https://openalex.org/W1987647365","https://openalex.org/W2026054276","https://openalex.org/W2044675702","https://openalex.org/W2087363218","https://openalex.org/W2118294554","https://openalex.org/W2120402121","https://openalex.org/W2124944346","https://openalex.org/W2135211381","https://openalex.org/W2162387923","https://openalex.org/W2169868363","https://openalex.org/W2196732887","https://openalex.org/W2359935840","https://openalex.org/W2532550198","https://openalex.org/W2911964244","https://openalex.org/W2916086000","https://openalex.org/W6678200280","https://openalex.org/W6707154924"],"related_works":["https://openalex.org/W7095495232","https://openalex.org/W4385688802","https://openalex.org/W2515404375","https://openalex.org/W1491081130","https://openalex.org/W4385451785","https://openalex.org/W2401124381","https://openalex.org/W3007497615","https://openalex.org/W7211941966","https://openalex.org/W7161967160","https://openalex.org/W1984124567"],"abstract_inverted_index":{"JavaScript":[0,44,88,102,122,170,198],"plays":[1],"an":[2],"important":[3],"role":[4],"in":[5,18,212],"web":[6,16,187,214],"applications":[7],"and":[8,26,39,47,91,116,131,144,181,200,204,220,241],"services,":[9],"which":[10,163],"is":[11,45],"used":[12],"by":[13,64,126],"millions":[14],"of":[15,78,167,224,245],"pages":[17,215],"optimizing":[19],"interface":[20],"design,":[21],"embedding":[22],"dynamic":[23,117,132],"texts,":[24],"reading":[25],"writing":[27],"HTML":[28],"elements,":[29],"validating":[30],"form":[31],"data,":[32],"responding":[33],"to":[34,86,98,134,141,149],"browser":[35,177],"events,":[36],"controlling":[37],"cookies":[38],"much":[40],"more.":[41],"However,":[42,73],"since":[43,74],"cross-platform":[46],"can":[48,164,195,208,235],"be":[49],"executed":[50],"dynamically,":[51],"it":[52,92],"has":[53,93,242],"been":[54,94],"a":[55,95,110,160,176],"major":[56],"vehicle":[57],"for":[58,119],"web-based":[59],"attacks.":[60,151],"Existing":[61],"solutions":[62],"work":[63],"performing":[65,146],"static":[66,115],"analysis":[67,112,118,130],"or":[68],"monitoring":[69],"program":[70],"execution":[71],"dynamically.":[72],"the":[75,231],"heavy":[76],"use":[77],"obfuscation":[79],"techniques,":[80],"many":[81],"methods":[82],"no":[83,243],"longer":[84],"apply":[85],"malicious":[87,101,121,142,169,197],"code":[89,103,123,143,156,171,199,223],"detection,":[90],"huge":[96],"challenge":[97],"de-obfuscate":[99,201,221],"obfuscated":[100,168],"accurately.":[104,172],"In":[105,152],"this":[106],"paper,":[107],"we":[108,158,174],"propose":[109,159],"hybrid":[111],"method":[113,162,194,234],"combining":[114],"detecting":[120],"that":[124,138,192],"works":[125],"first":[127],"conducting":[128],"syntax":[129],"instrumentation":[133],"extract":[135],"internal":[136],"features":[137],"are":[139],"related":[140],"then":[145],"classification-based":[147],"detection":[148],"distinguish":[150],"addition,":[153],"based":[154],"on":[155,184],"instrumentation,":[157],"new":[161],"deobfuscate":[165],"part":[166],"Ultimately,":[173],"implement":[175],"plug-in":[178],"called":[179],"MJDetector":[180,207],"perform":[182],"evaluation":[183],"450":[185],"real":[186],"pages.":[188],"Evaluation":[189],"results":[190],"show":[191],"our":[193],"detect":[196,209,237],"obfucation":[202],"effectively":[203],"efficiently.":[205],"Specifically,":[206],"JavaScipt":[210],"attacks":[211],"current":[213],"with":[216,227,238],"high":[217],"accuracy":[218,228,239],"94.76%":[219],"obfuscate":[222],"specific":[225],"types":[226],"100%":[229],"whereas":[230],"base":[232],"line":[233],"only":[236],"81.16%":[240],"capacity":[244],"de-obfuscation.":[246]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":6},{"year":2019,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2019-05-29T00:00:00"}