Detection of JavaScript of Malware with Un-readability Using Mahalanobis-Distance

Increasing of Java Scripts of malware requires automatic malware detection systems in these days. Our research takes note of the appearence probability and the state transition probability of first order Markov source for both of malware Java Script and other Java Script. The preexperiments found statistical significance. We propose the malware detection method using Mahalanobis-distance with the probability variable of the appearance probability of characters and the probability variable of state transition probability of first order Markov source. As the results of experiments, the method of combining two probability variables proved the effectiveness compared to the method using single probability variable.