A novel algorithm for obfuscated code analysis

Obfuscated code is machine or source code that is made difficult to be read by humans. It is usually done to hide some important business logic or to hide malicious intent. There has been a dramatic increase in the use of obfuscated codes for drive-by-download web browser attacks using javascripts. In this paper we will present a novel approach for detecting this type of code without the need for de-obfuscation, allowing its usage on real-time traffic analysis programs like Intrusion Prevention Systems or Web Application Firewalls.