Toward Reliable Malicious JavaScript Detection in Obfuscated Code

This research addresses a weakness in malicious JavaScript detection systems: they fail to reliably identify harmful code when it has been obfuscated (disguised through code transformation techniques to hide its true purpose). The authors propose SeGra, a new detection method that uses data flow features (how data moves through the program) and random walk techniques to better identify malicious JavaScript even in obfuscated code, achieving up to 99.5% accuracy on lightly obfuscated code and 67.1% on heavily obfuscated code.