Analiza i detekcija zlonamjernog Javascript koda

master's thesis

• Title (english): Analysis and detection of malicious Javascript code
• Author: Dora Pušelj
• Mentor: Marin Vuković (mentor)
• Committee member: Marin Vuković (predsjednik povjerenstva)
• Committee member: Miljenko Mikuc (član povjerenstva)
• Committee member: Mario Kušek (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2021-07-09, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Kako je Internet postao važan dio naše svakodnevice, tako su i razni napadi putem njega postali sve ćešći. Jedan od izvora takvih napada je upravo JavaScript kod. U ovome radu pokušava se detektirati takav zlonamjerni JavaScript kod tehnikama strojnog učenja. Iz JavaScript koda izgradi se apstraktno sintaksno stablo iz kojeg se pomoću DFS algoritma dobiju sekvence sintaktičkih jedinica. Zatim se koristi Word2Vec model kako bi se dobila numerička reprezentacija tih sintaktičkih jedinica. Učeni su modeli unaprijedna slojevita neuronska mreža, LSTM te BiLSTM te je pokazano kako BiLSTM daje najbolje rezultate.

Abstract (english)

As the Internet has become an important part of our everyday lives, the attacks by its means became more pervasive too. One of the sources of such attacks is JavaScript. In this thesis, a model for detecting malicious JavaScript is proposed. An AST tree is built from JavaScript source code and converted to a sequence of syntactic units by a depth-first search algorithm. Moreover, a Word2Vec model is used to obtain a numeric representation of the syntactic units. Three models are trained: feed-forward neural network, LSTM, and BiLSTM. The BiLSTM model turned out to give the best results.

• Keywords: JavaScript; zlonamjerni JavaScript; strojno učenje; AST stablo
• Keywords (english): JavaScript; malicious JavaScript; machine learning; AST tree
• Language: croatian
• URN:NBN: urn:nbn:hr:168:452696
• Study programme: Title: Computing; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-13 13:37:09