A Cloud-based Protection approach against JavaScript-based attacks to browsers. (May 2018)

• Record Type: Journal Article
• Authors: Hsu, Fu-Hau; Hwang, Yan-Ling; Lee, Chia-Hao; Lin, Chieh-Ju; Chang, KaiWei; Huang, Chen-Chia
• Is Part Of: Computers & electrical engineering. Volume 68(2018)
• Page Start: 241
• Page End: 251
• Publication Date: 2018-05
• Subjects: Web security -- Malicious JavaScript -- VirusTotal -- Cloud-based Protection; 00-01 -- 99-00; Computer engineering -- Periodicals; Electrical engineering -- Periodicals; Electrical engineering -- Data processing -- Periodicals; Ordinateurs -- Conception et construction -- Périodiques; Électrotechnique -- Périodiques; Électrotechnique -- Informatique -- Périodiques; Computer engineering; Electrical engineering; Electrical engineering -- Data processing; Periodicals; Electronic journals; 621.302854
• DOI: 10.1016/j.compeleceng.2018.03.050
• Languages: English
• ISSNs: 0045-7906

Abstract

Abstract: JavaScript is a standard of client-side scripting languages. Due to its cross-platform property, JavaScript is widely used in web pages. Hence its security problems can seriously influence the security of devices executing code written by it. This paper proposes aC loud-basedP rotection approach againstJ avaScript-based attacks to browsers, called CPJ. CPJ provides timely and effective protection to web browsers to cope with attackers' continuously developing new JavaScript-based attack approaches. CPJ integrates VirusTotal, a cloud-based security analysis service, into a browser. Therefore, with the latest malware signature databases, it can analyze the behavior of a variety of JavaScript files. It allows a browser to block malicious code when the browser is surfing the Internet. We demonstrate its feasibility using Internet experiments, and show its effectiveness on a variety of suspicious targets. According to our experiments, CPJ has rather good sensitivity and performance.