Improving Detection Accuracy for Malicious Java']JavaScript Using GAN

被引:1
|
作者
Guo, Junxia [1 ]
Cao, Qiyun [1 ]
Zhao, Rilian [1 ]
Li, Zheng [1 ]
机构
[1] Beijing Univ Chem Technol, Coll Informat Sci & Technol, Beijing, Peoples R China
来源
WEB ENGINEERING, ICWE 2020 | 2020年 / 12128卷
基金
中国国家自然科学基金;
关键词
Malicious code detection; !text type='Java']Java[!/text]Script; GAN; Classifier;
D O I
10.1007/978-3-030-50578-3_12
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
Dynamic web pages are widely used in web applications to provide better user experience. Meanwhile, web applications have become a primary target in cybercriminals by injecting malware, especially JavaScript, to perform malicious activities through impersonation. Thus, in order to protect users from attacks, it is necessary to detect those malicious codes before they are executed. Since the types of malicious codes increase quickly, it is difficult for the traditional static and dynamic approaches to detect new style of malicious code. In recent years, machine learning has been used in malicious code identification approaches. However, a large number of labeled samples are required to achieve good performance, which is difficult to acquire. This paper proposes an efficient method for improving the classifiers' recognition rate in detecting malicious JavaScript based on Generative Adversarial Networks (GAN). The output from the GAN is used to train classifiers. Experimental results show that our method can achieve better accuracy with a limited set of labeled sample.
引用
收藏
页码:163 / 170
页数:8
相关论文
共 50 条
  • [41] The Power of Obfuscation Techniques in Malicious Java']JavaScript Code: A Measurement Study
    Xu, Wei
    Zhang, Fangfang
    Zhu, Sencun
    [J]. PROCEEDINGS OF THE 2012 7TH INTERNATIONAL CONFERENCE ON MALICIOUS AND UNWANTED SOFTWARE, 2012, : 9 - 16
  • [42] Java']JavaScript Malicious Codes Analysis Based on Naive Bayes Classification
    Hao, Yongle
    Liang, Hongliang
    Zhang, Daijie
    Zhao, Qian
    Cui, Baojiang
    [J]. 2014 NINTH INTERNATIONAL CONFERENCE ON P2P, PARALLEL, GRID, CLOUD AND INTERNET COMPUTING (3PGCIC), 2014, : 513 - 519
  • [43] Improving Vulnerability Prediction of Java']JavaScript Functions using Process Metrics
    Viszkok, Tamas
    Hegedus, Peter
    Ferenc, Rudolf
    [J]. PROCEEDINGS OF THE 16TH INTERNATIONAL CONFERENCE ON SOFTWARE TECHNOLOGIES (ICSOFT), 2021, : 185 - 195
  • [44] Towards the Detection of Malicious Java']Java Packages
    Ladisa, Piergiorgio
    Plate, Henrik
    Martinez, Matias
    Barais, Olivier
    Ponta, Serena Elisa
    [J]. PROCEEDINGS OF THE 2022 ACM WORKSHOP ON SOFTWARE SUPPLY CHAIN OFFENSIVE RESEARCH AND ECOSYSTEM DEFENSES, SCORED 2022, 2022, : 63 - 72
  • [45] An Approach for Malicious Java']JavaScript Detection Using Adaptive Taylor Harris Hawks Optimization-Based Deep Convolutional Neural Network
    Alex, Scaria
    Rajkumar, Dhiliphan T.
    [J]. INTERNATIONAL JOURNAL OF DISTRIBUTED SYSTEMS AND TECHNOLOGIES, 2022, 13 (05)
  • [46] Malicious PDF Detection Model against Adversarial Attack Built from Benign PDF Containing Java']JavaScript
    Kang, Ah Reum
    Jeong, Young-Seob
    Kim, Se Lyeong
    Woo, Jiyoung
    [J]. APPLIED SCIENCES-BASEL, 2019, 9 (22):
  • [47] JS']JSPRE: A Large-Scale Detection of Malicious Java']JavaScript Code Based on Pre-filter
    Hou, Bingnan
    Yu, Jiaping
    Liu, Bixin
    Cai, Zhiping
    [J]. CLOUD COMPUTING AND SECURITY, PT VI, 2018, 11068 : 586 - 599
  • [48] Js']JsSandbox: A Framework for Analyzing the Behavior of Malicious Java']JavaScript Code using Internal Function Hooking
    Kim, Hyoung Chun
    Choi, Young Han
    Lee, Dong Hoon
    [J]. KSII TRANSACTIONS ON INTERNET AND INFORMATION SYSTEMS, 2012, 6 (02): : 766 - 783
  • [49] MJBlocker: A Lightweight and Run-time Malicious Java']JavaScript Extensions Blocker
    Wang, Pingjian
    Wang, Lei
    Xiang, Ji
    Liu, Peng
    Gao, Neng
    Jing, Jiwu
    [J]. 2013 IEEE 7TH INTERNATIONAL CONFERENCE ON SOFTWARE SECURITY AND RELIABILITY (SERE), 2013, : 119 - 128
  • [50] JS']JSDES - An Automated De-Obfuscation System for Malicious Java']JavaScript
    AbdelKhalek, Moataz
    Shosha, Ahmed
    [J]. PROCEEDINGS OF THE 12TH INTERNATIONAL CONFERENCE ON AVAILABILITY, RELIABILITY AND SECURITY (ARES 2017), 2017,