Rozzle: De-cloaking Internet Malware

No abstract is available for this paper.

• Publication year

  2012

• Venue

  IEEE Symposium on Security and Privacy

• Publication date

  2012-05-20

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1109/SP.2012.48
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Multiple facets for dynamic information flow

  2012cited by this paper
• Symbolic finite state transducers: algorithms and applications

  2012cited by this paper
• WebPatrol: automated collection and replay of web-based malware scenarios

  2011cited by this paper
• Improving malicious URL re-evaluation scheduling through an empirical study of malware download centers

  2011cited by this paper
• AEG: Automatic Exploit Generation

  2011influential reference
• Fingerprinting Information in JavaScript Implementations

  2011cited by this paper
• ZOZZLE: Fast and Precise In-Browser JavaScript Malware Detection

  2011cited by this paper
• "NOFUS: Automatically Detecting" + String.fromCharCode(32) + "ObFuSCateD ".toLowerCase() + "JavaScript Code"

  2011cited by this paper
• Efficient Detection of Split Personalities in Malware

  2010cited by this paper
• WebCop: Locating Neighborhoods of Malware on the Web

  2010cited by this paper
• A Symbolic Execution Framework for JavaScript

  2010influential reference
• Detection and analysis of drive-by-download attacks and malicious JavaScript code

  2010cited by this paper
• ConScript: Specifying and Enforcing Fine-Grained Security Policies for JavaScript in the Browser

  2010cited by this paper
• NoTamper: automatic blackbox detection of parameter tampering opportunities in web applications

  2010cited by this paper
• Identifying Dormant Functionality in Malware Programs

  2010cited by this paper
• FLAX: Systematic Discovery of Client-side Validation Vulnerabilities in Rich Web Applications

  2010cited by this paper
• Zozzle: Low-overhead Mostly Static JavaScript Malware Detection

  2010influential reference
• An empirical study of privacy-violating information flows in JavaScript web applications

  2010cited by this paper
• Symbolic PathFinder: symbolic execution of Java bytecode

  2010cited by this paper
• Preventing drive-by download via inter-module communication monitoring

  2010cited by this paper
• How Unique Is Your Web Browser?

  2010cited by this paper
• Platform-independent programs

  2010cited by this paper
• Scareware: the inside story

  2010cited by this paper
• NOZZLE: A Defense Against Heap-spraying Code Injection Attacks

  2009influential reference
• Detection of cloaked web spam by using tag-based methods

  2009cited by this paper
• PhoneyC: A Virtual Client Honeypot

  2009cited by this paper
• Toward Revealing Kernel Malware Behavior in Virtual Execution Environments

  2009cited by this paper
• Fitness-guided path exploration in dynamic symbolic execution

  2009cited by this paper
• IntScope: Automatically Detecting Integer Overflow Vulnerability in X86 Binary Using Symbolic Execution

  2009cited by this paper
• Dynamic Test Generation to Find Integer Bugs in x86 Binary Linux Programs

  2009cited by this paper
• RB-Seeker: Auto-detection of Redirection Botnets

  2009cited by this paper
• Measurement Study on Malicious Web Servers in the .nz Domain

  2009cited by this paper
• A Study of URL Redirection Indicating Spam

  2009cited by this paper
• Automated Whitebox Fuzz Testing

  2008influential reference
• Studying Malicious Websites and the Underground Economy on the Chinese Web

  2008cited by this paper
• KLEE: Unassisted and Automatic Generation of High-Coverage Tests for Complex Systems Programs

  2008cited by this paper
• Dynamic test input generation for web applications

  2008cited by this paper
• Automatically Identifying Trigger-based Behavior in Malware

  2008cited by this paper
• Vigilante: End-to-end containment of Internet worm epidemics

  2008cited by this paper
• All Your iFRAMEs Point to Us

  2008cited by this paper
• Toward Automated Dynamic Malware Analysis Using CWSandbox

  2007cited by this paper
• A Forced Sampled Execution Approach to Kernel Rootkit Identification

  2007cited by this paper
• The Ghost in the Browser: Analysis of Web-based Malware

  2007influential reference
• Renovo: a hidden code extractor for packed executables

  2007cited by this paper
• A taxonomy of JavaScript redirection spam

  2007cited by this paper
• OmniUnpack: Fast, Generic, and Safe Unpacking of Malware

  2007cited by this paper
• Towards Automatic Discovery of Deviations in Binary Implementations with Applications to Error Detection and Fingerprint Generation

  2007cited by this paper
• Exploring Multiple Execution Paths for Malware Analysis

  2007cited by this paper
• Detecting semantic cloaking on the web

  2006cited by this paper
• Automatically generating malicious disks using symbolic execution

  2006cited by this paper
• Automated Web Patrol with Strider HoneyMonkeys: Finding Web Sites That Exploit Browser Vulnerabilities

  2006cited by this paper
• A Crawler-based Study of Spyware in the Web

  2006cited by this paper
• TTAnalyze: A Tool for Analyzing Malware

  2006cited by this paper
• PolyUnpack: Automating the Hidden-Code Extraction of Unpack-Executing Malware

  2006cited by this paper
• EXE: automatically generating inputs of death

  2006cited by this paper
• Remote physical device fingerprinting

  2005cited by this paper
• Cloaking and Redirection: A Preliminary Study

  2005cited by this paper
• Adoption and focus: practical linear types for imperative programming

  2002cited by this paper
• Defeating TCP/IP Stack Fingerprinting

  2000cited by this paper
• Gated SSA-based demand-driven symbolic analysis for parallelizing compilers

  1995cited by this paper
• Symbolic Boolean manipulation with ordered binary-decision diagrams

  1992cited by this paper
• Symbolic execution and program testing

  1976cited by this paper

• From Obfuscated to Obvious: A Comprehensive JavaScript Deobfuscation Tool for Security Analysis

  2025cites this paper
• Fakeium: A Dynamic Execution Environment for JavaScript Program Analysis

  2024cites this paper
• FV8: A Forced Execution JavaScript Engine for Detecting Evasive Techniques

  2024cites this paper
• Fuzzing and Symbolic Execution for Multipath Malware Tracing: Bridging Theory and Practice via Survey and Experiments

  2024cites this paper
• A Hybrid Binary Neural Tree For Malicious URL Detection

  2023cites this paper
• Static Semantics Reconstruction for Enhancing JavaScript-WebAssembly Multilingual Malware Detection

  2023cites this paper
• Malicious website identification using design attribute learning

  2023cites this paper
• An Empirical Study on the Effects of Obfuscation on Static Machine Learning-Based Malicious JavaScript Detectors

  2023cites this paper
• BFTDETECTOR: Automatic Detection of Business Flow Tampering for Digital Content Service

  2023cites this paper
• JSRevealer: A Robust Malicious JavaScript Detector against Obfuscation

  2023cites this paper
• PENDETEKSI MALWARE JAVASCRIPT MENGGUNAKAN FITUR SEMANTIK PROGRAM

  2023cites this paper
• An Efficient Hybrid Webshell Detection Method for Webserver of Marine Transportation Systems

  2023cites this paper
• I still know it's you! On Challenges in Anonymizing Source Code

  2022cites this paper
• Toward a Better Understanding of Mobile Users’ Behavior: A Web Session Repair Scheme

  2022cites this paper
• CrawlPhish: Large-Scale Analysis of Client-Side Cloaking Techniques in Phishing

  2022cites this paper
• Wobfuscator: Obfuscating JavaScript Malware via Opportunistic Translation to WebAssembly

  2022cites this paper
• Improved security and protection from malware for embedded IoT devices

  2021cites this paper
• CrawlPhish: Large-scale Analysis of Client-side Cloaking Techniques in Phishing

  2021cites this paper
• Fokozott kiberbiztonság és rosszindulatú kódok elleni védelem beágyazott IoT-eszközök számára

  2021cites this paper
• SeizeMaliciousURL: A novel learning approach to detect malicious URLs

  2021cites this paper
• Seance: Divination of tool-breaking changes in forensically important binaries

  2021cites this paper
• U Can't Debug This: Detecting JavaScript Anti-Debugging Techniques in the Wild

  2021cites this paper
• Spider bird swarm algorithm with deep belief network for malicious JavaScript detection

  2021cites this paper
• TagVet: Vetting Malware Tags using Explainable Machine Learning

  2021cites this paper
• Mnemosyne: An Effective and Efficient Postmortem Watering Hole Attack Investigation System

  2020cites this paper
• PMForce: Systematically Analyzing postMessage Handlers at Scale

  2020cites this paper
• Study of Blacklisted Malicious Domains from a Microsoft Windows End-user Perspective: Is It Safe Behind the Wall?

  2020cites this paper
• Finding Client-side Business Flow Tampering Vulnerabilities

  2020cites this paper
• Computational Resource Abuse in Web Applications

  2020influential citation
• Hiding in Plain Site: Detecting JavaScript Obfuscation through Concealed Browser API Usage

  2020cites this paper
• Efficient machine learning for attack detection

  2020influential citation
• CVSkSA: cross-architecture vulnerability search in firmware based on kNN-SVM and attributed control flow graph

  2019cites this paper
• Hybrid Optimization Driven Technique for Malicious Javascript Detection Based on Deep Learning Classifier

  2019cites this paper
• SELWasm: A Code Protection Mechanism for WebAssembly

  2019cites this paper
• Malicious URL Linkage Analysis and Common Pattern Discovery

  2019cites this paper
• Beyond Con gurable Systems: Applying Variational Execution to Tackle Exponentially Large Search Spaces

  2019cites this paper
• Cubismo: decloaking server-side malware via cubist program analysis

  2019influential citation
• Unacceptable Behavior: Robust PDF Malware Detection Using Abstract Interpretation

  2019cites this paper
• MalMax: Multi-Aspect Execution for Automated Dynamic Web Server Malware Analysis

  2019cites this paper
• VisibleV8: In-browser Monitoring of JavaScript in the Wild

  2019cites this paper
• HideNoSeek: Camouflaging Malicious JavaScript in Benign ASTs

  2019cites this paper
• JStap: a static pre-filter for malicious JavaScript detection

  2019influential citation
• Thieves in the Browser: Web-based Cryptojacking in the Wild

  2019cites this paper
• Towards Detecting Trigger-Based Behavior in Binaries: Uncovering the Correct Environment

  2019cites this paper
• New Kid on the Web: A Study on the Prevalence of WebAssembly in the Wild

  2019cites this paper
• Evasive Malicious Website Detection by Leveraging Redirection Subgraph Similarities

  2019cites this paper
• gExtractor: Automated Extraction of Malware Deception Parameters for Autonomous Cyber Deception

  2019cites this paper
• Easy to Fool? Testing the Anti-evasion Capabilities of PDF Malware Scanners

  2019cites this paper
• Practical Applications of Client-side Trusted Computing

  2018cites this paper
• A Postmortem Forensic Analysis for a JavaScript Based Attack

  2018cites this paper
• JSgraph: Enabling Reconstruction of Web Attacks via Efficient Tracking of Live In-Browser JavaScript Executions

  2018cites this paper
• JaSt: Fully Syntactic Detection of Malicious (Obfuscated) JavaScript

  2018cites this paper
• Understanding Differences among Executions with Variational Traces

  2018cites this paper
• Web-based Cryptojacking in the Wild

  2018cites this paper
• Faster variational execution with transparent bytecode transformation

  2018cites this paper
• SAFE-PDF: Robust Detection of JavaScript PDF Malware Using Abstract Interpretation

  2018cites this paper
• JSgraph: Enabling Reconstruction of Web Attacks via Efficient Tracking of Live In-Browser JavaScript Executions.

  2018cites this paper
• Ares: Triggering Payload of Evasive Android Malware

  2018cites this paper
• FrameHanger: Evaluating and Classifying Iframe Injection at Large Scale

  2018cites this paper
• Identifying Evasive Code in Malicious Websites by Analyzing Redirection Differences

  2018cites this paper
• gExtractor: Towards Automated Extraction of Malware Deception Parameters

  2018cites this paper
• Accurate Malware Detection by Extreme Abstraction

  2018cites this paper
• Vulnerability exploration and data protection in end-user applications

  2018cites this paper
• Learning-based Cyber Security Analysis and Binary Customization for Security

  2018cites this paper
• SmartDetect: A Smart Detection Scheme for Malicious Web Shell Codes via Ensemble Learning

  2018cites this paper
• Malicious Websites Identification Based on Active-Passive Method

  2018cites this paper
• A Survey On Automated Dynamic Malware Analysis Evasion and Counter-Evasion: PC, Mobile, and Web

  2017cites this paper
• Malicious URL Detection using Machine Learning: A Survey

  2017cites this paper
• Master ’ s Thesis Title Detecting Drive-by Download Attacks from Proxy Log Information using Convolutional Neural Network

  2017cites this paper
• Environmental Authentication in Malware

  2017cites this paper
• CVSSA: Cross-Architecture Vulnerability Search in Firmware Based on Support Vector Machine and Attributed Control Flow Graph

  2017cites this paper
• Multiple Facets for Dynamic Information Flow with Exceptions

  2017cites this paper
• Detecting Malicious Websites by Integrating Malicious, Benign, and Compromised Redirection Subgraph Similarities

  2017cites this paper
• PlatPal: Detecting Malicious Documents with Platform Diversity

  2017cites this paper
• J-Force: Forced Execution on JavaScript

  2017influential citation
• Fraternal Twins: Unifying Attacks on Machine Learning and Digital Watermarking

  2017cites this paper
• JSForce: A Forced Execution Engine for Malicious JavaScript Detection

  2017influential citation
• Making Malory Behave Maliciously: Targeted Fuzzing of Android Execution Environments

  2017cites this paper
• Browser Fingerprinting as user tracking technology

  2017cites this paper
• DOMPurify: Client-Side Protection Against XSS and Markup Injection

  2017cites this paper
• Ziffersystem: A novel malware distribution detection system

  2017cites this paper
• TrustJS: Trusted Client-side Execution of JavaScript

  2017cites this paper
• An ICMetric based multiparty communication framework

  2017cites this paper
• Towards Semi-automated Detection of Trigger-based Behavior for Software Security Assurance

  2017cites this paper
• Understanding Evasion Techniques that Abuse Differences Among JavaScript Implementations

  2017cites this paper
• An Improved Method to Unveil Malware's Hidden Behavior

  2017cites this paper
• Kizzle: A Signature Compiler for Exploit Kits

  2017cites this paper
• Real-world IP and network tracking measurement study of malicious websites with HAZOP

  2017cites this paper
• A Malicious Web Site Identification Technique Using Web Structure Clustering

  2017cites this paper
• DETECTION, DIAGNOSIS AND MITIGATION OF MALICIOUS JAVASCRIPT WITH ENRICHED JAVASCRIPT EXECUTIONS

  2017influential citation
• Network Traffic Measurements, Applications to Internet Services and Security

  2017cites this paper
• Localisation of Attacks, Combating Browser-Based Geo-Information and IP Tracking Attacks

  2017cites this paper
• Enabling Fine-Grained Reconstruction and Analysis of Web Attacks with In-Browser Recording Systems

  2017cites this paper
• A Study of Gaps in Defensive Countermeasures for Web Security

  2016cites this paper
• Next Generation Of Exploit Kit Detection By Building Simulated Obfuscators

  2016cites this paper
• MineSpider: Extracting Hidden URLs Behind Evasive Drive-by Download Attacks

  2016influential citation
• Revealing Malicious Contents Hidden In The Internet

  2016cites this paper
• Defending against cybercrime: advances in the detection of malicious servers and the analysis of client-side vulnerabilities

  2016cites this paper
• Comprehensive Analysis and Detection of Flash-Based Malware

  2016influential citation
• A Calculus for Variational Programming

  2016cites this paper