Tehnike otkrivanja zloćudnog kôda na web stranicama

undergraduate thesis

• Title (english): Techniques for Detecting Malware on Websites
• Author: Jakov Zubčić
• Mentor: Stjepan Groš (mentor)
• Committee member: Stjepan Groš (član povjerenstva)
• Committee member: Bruno Bijelić (član povjerenstva)
• Committee member: Mihael Marović (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2021-07-05, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Internet je u današnje vrijeme vrlo raširen i vrlo je povoljan za širenje zloćudnog koda. U ovom radu je dan pregled raznih vrsta zloćudnog koda koje postoje, te su objašnjene relevantne specifičnosti jezika JavaScript koji je kod gotovo svih web stranica korišten za razvoj klijentske strane. Razvijen je sustav koji nastoji otkriti zloćudan kod, korištenjem primarno YARA pravila, alat za opis konkretnih primjeraka ili obitelji zloćudnog koda. Opisana je obfuskacija, postupak koji najviše otežava detekciju zloćudnog koda, te su isprobani neki eksperimentalni pristupi vezani uz taj postupak. Dan je pregled raznih pristupa problemu detekcije zloćudnog JavaScript koda i navedene su njihove prednosti i nedostaci.

Abstract (english)

The Internet is very widespread today and is favorable as a platform for spreading malware. In this paper an overview of various malware kinds is given, and some relevant specific characteristics of the JavaScript programming language are explained. JavaScript is important for this topic because it is used on a large majority of web pages on the client side. A system that uses primarily YARA rules, a tool for describing specific malware samples or families, to detect malicious code. A description of obfuscation is given, since it represents the biggest problem in malware detection, as well as a description of some experimental approaches regarding obfuscation. Various methods of detecting malicious JavaScript codes are explained, as well as their advantages and drawbacks, accompanied by concrete examples.

• Keywords: Statička analiza; YARA pravila; kibernetička sigurnost; malware
• Keywords (english): Static analysis; YARA rules; cybersecrurity; malware
• Language: croatian
• URN:NBN: urn:nbn:hr:168:085009
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-14 22:04:16