DocumentCode :
3549519
Title :
Detecting malicious JavaScript code in Mozilla
Author :
Hallaraker, Oystein ; Vigna, Giovanni
Author_Institution :
Dept. of Comput. Sci., California Univ., Santa Barbara, CA, USA
fYear :
2005
fDate :
16-20 June 2005
Firstpage :
85
Lastpage :
94
Abstract :
The JavaScript language is used to enhance the client-side display of web pages. JavaScript code is downloaded into browsers and executed on-the-fly by an embedded interpreter. Browsers provide sand-boxing mechanisms to prevent JavaScript code from compromising the security of the client´s environment, but, unfortunately, a number of attacks exist that can be used to steal users´ credentials (e.g., cross-site scripting attacks) and lure users into providing sensitive information to unauthorized parties (e.g., phishing attacks). We propose an approach to solve this problem that is based on monitoring JavaScript code execution and comparing the execution to high-level policies, to detect malicious code behavior. To achieve this goal it is necessary to provide a mechanism to audit the execution of JavaScript code. This is a difficult task, because of the close integration of JavaScript with complex browser applications, such as Mozilla. This paper presents the first existing implementation of an auditing system for JavaScript interpreters and discusses the pitfalls and lessons learned in developing the auditing mechanism.
Keywords :
Internet; Java; computer crime; data privacy; online front-ends; program interpreters; system monitoring; JavaScript code execution monitoring; JavaScript interpreter; JavaScript language; Mozilla; Web browsers; Web pages; auditing system; client-side display; cross-site scripting attacks; embedded interpreter; malicious JavaScript code detection; malicious code behavior; phishing attacks; sand-boxing mechanism; security; sensitive information; user credentials; Application software; Computer displays; Computer networks; Computer science; Information security; Java; Mobile computing; Monitoring; Web pages; Web server; JavaScript; Mobile Code; Web Applications;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Engineering of Complex Computer Systems, 2005. ICECCS 2005. Proceedings. 10th IEEE International Conference on
Print_ISBN :
0-7695-2284-X
Type :
conf
DOI :
10.1109/ICECCS.2005.35
Filename :
1467889
Link To Document :
بازگشت