Microsoft Research Develops Zozzle JavaScript Malware Detection Tool

[leofelix]

Microsoft Research Develops Zozzle JavaScript Malware Detection Tool

by Dennis Fisher

As browser-based exploits and specifically JavaScript malware have shouldered their way to the top of the list of threats, browser vendors have been scrambling to find effective defenses to protect users. Few have been forthcoming, but Microsoft Research has developed a new tool called Zozzle that can be deployed in the browser and can detect JavaScript-based malware at a very high effectiveness rate.

Zozzle is designed to perform static analysis of JavaScript code on a given site and quickly determine whether the code is malicious and includes an exploit. In order to be effective, the tool must be trained to recognize the elements that are common to malicious JavaScript, and the researchers behind it stress that it works best on de-obfuscated code. In the paper, the researchers say that they trained Zozzle by crawling millions of Web sites and using a similar tool, called Nozzle, to process the URLs and see whether malware was present.

you can download the Zozzle paper PDF file here

Read more


Via

[Boyfriend]

Thanks leofelix for Zozzle and Nozzle info

[INDRANIL]

Thank you captain for the info . Going to read this .

[safeguy]

Is it just me or does anyone else think that there's a possibility that MS is going to include this in IE or MSE in the future?