Microsoft Research creates a JavaScript malware scanner
Friday, 03 December 2010

Keeping JavaScript based malware at bay might just be a job for an AI-trained tool called Zozzle.

 

Banner

JavaScript is useful but the need to guard against malware hiding in deeply obsfucated code is a growing problem. Microsoft Research has invented a scanner that can detect malware using mostly static analysis - and has called it Zozzle.

Zozzle is a product of AI techniques. The researchers used a statistical classifier to scan millions of web pages for malware. The JavaScript has to be de-obfuscated first and then analysed for features that are characteristic of malware. The features are created using an abstract syntax tree. Zozzle hooks into the JavaScript engine to get the final expanded version of the JavaScript code the page contains.

MSR

At the moment the tool is in the research phase and there is no date set for release into the wild. Current performance is claimed as less than 1% false positive with a typical 2-5 millisecond processing time per Kbyte of code.

The researchers say that they can envisage it being used both within a browser context to protect against malware on the fly or in an offline context to classify and blacklist infected sites.

More information

http://research.microsoft.com/pubs/141930/tr.pdf

 

Banner


R Heads For Top Ten Languages
01/12/2014

You may doubt the TIOBE index, but it is still interesting to read the signals and relative movements. This month the shock news is that R has jumped up the table to number 12 and there is more to say [ ... ]



Feminist Hacker Barbie?
26/11/2014

Can you see Barbie as a computer engineer? No, apparently nor can Mattel, though the online community is giving a much more accurate and amusing view of how things would work out under the hashtag #fe [ ... ]


More News

Last Updated ( Friday, 03 December 2010 )
 
 

   
RSS feed of news items only
I Programmer News
Copyright © 2014 i-programmer.info. All Rights Reserved.
Joomla! is Free Software released under the GNU/GPL License.