Abstract:System security for web-based applications is paramount, and for the avoidance of possible cyberattacks it is important to detect vulnerable JavaScript functions. Developers and security analysts have long relied upon static analysis to investigate vulnerabilities and faults within programs. Static analysis tools are used for analyzing a program’s source code and identifying sections of code that need to be further examined by a human analyst. This article suggests a new approach for identifying vulnerable code in JavaScript programs by using ensemble of convolutional neural networks (CNNs) models. These models use vulnerable information and code features to detect related vulnerable code. For identifying different vulnerabilities in JavaScript functions, an approach has been tested which involves the stacking of CNNs with misbalancing, random under sampler, and random over sampler. Our approach uses these CNNs to detect vulnerable code and improve upon current techniques’ limitations. Previous research has introduced several approaches to identify vulnerable code in JavaScript programs, but often have their own limitations such as low accuracy rates and high false-positive or false-negative results. Our approach addresses this by using the power of convolutional neural networks and is proven to be highly effective in the detection of vulnerable functions that could be used by cybercriminals. The stacked CNN approach has an approximately 98% accuracy, proving its robustness and usability in real-world scenarios. To evaluate its efficacy, the proposed method is trained using publicly available JavaScript blocks, and the results are assessed using various performance metrics. The research offers a valuable insight into better ways to protect web-based applications and systems from potential threats, leading to a safer online environment for all.

JSContana: Malicious JavaScript detection using adaptable context analysis and key feature extraction

Malicious JavaScript Code Detection Based on Hybrid Analysis

A deep learning approach for detecting malicious JavaScript code

JStrong: Malicious JavaScript detection based on code semantic representation and graph neural network

JACLNet:Application of adaptive code length network in JavaScript malicious code detection

JStill: mostly static detection of obfuscated malicious JavaScript code

Vulnerable JavaScript functions detection using stacking of convolutional neural networks

K-Means Clustering Analysis Based On Adaptive Weights For Malicious Code Detection

Vulnerability Detection for Source Code Using Contextual LSTM

Detection of Obfuscated Malicious JavaScript Code

Detection and analysis of malicious JavaScript code based on pre-filter

An ensemble framework for interpretable malicious code detection

Detecting Malicious Web Requests Using an Enhanced TextCNN.

A Novel Approach to Malicious Code Detection Using CNN-BiLSTM and Feature Fusion

Understanding the Influence of AST-JS for Improving Malicious Webpage Detection

Statically Detecting JavaScript Obfuscation and Minification Techniques in the Wild

Malicious Code Variant Identification Based on Multiscale Feature Fusion CNNs

Malicious Code Detection Method Based on Static Features and Ensemble Learning

Exploiting ML algorithms for Efficient Detection and Prevention of JavaScript-XSS Attacks in Android Based Hybrid Applications

Looking for Criminal Intents in JavaScript Obfuscated Code

A Malicious Code Detection Method Based on FF-MICNN in the Internet of Things