A Systematic Literature Review and Quality Analysis of Javascript Malware Detection

Context: JavaScript (JS) is an often-used programming language by millions of web pages and is also affected by thousands of malicious attacks. Objective: In this investigation, we provided a general view and a quick understanding of JavaScript Malware Detection (JSMD) research reported in the scien...

Celý popis

Uloženo v:

Podrobná bibliografie
Vydáno v:	IEEE access Ročník 8; s. 190539 - 190552
Hlavní autoři:	Sohan, Md. Fahimuzzman, Basalamah, Anas
Médium:	Journal Article
Jazyk:	angličtina
Vydáno:	Piscataway IEEE 2020 The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Témata:	Bibliographies Cybersecurity Data mining Investigations Java javascript attacks javascript malware detection Literature reviews Machine learning malicious code detection Malware Quality assessment systematic literature review Systematic review Systematics Websites
ISSN:	2169-3536, 2169-3536
On-line přístup:	Získat plný text
Tagy:	Přidat tag Žádné tagy, Buďte první, kdo vytvoří štítek k tomuto záznamu!

Abstract	Context: JavaScript (JS) is an often-used programming language by millions of web pages and is also affected by thousands of malicious attacks. Objective: In this investigation, we provided a general view and a quick understanding of JavaScript Malware Detection (JSMD) research reported in the scientific literature from several perspectives. Method: We performed a Systematic Literature Review (SLR) and quality analysis of published research articles on the topic. We investigated 32 articles published between the year 2009 to the year 2019. Results: Selected 32 papers explained in this article reflect the outline of what was published so far. One of our key findings is the performance of Machine Learning (ML) based detection models were relatively higher than others. We also found that only a few papers were able to achieve high scores according to the quality assessment criteria. Conclusion: In this SLR, we summarized and synthesized the existing JSMD studies to identify the previous research practices and also to shed light on future guidelines in the malware detection space. This study will guide and help future researchers to investigate the previous literature efficiently and effectively.
AbstractList	Context: JavaScript (JS) is an often-used programming language by millions of web pages and is also affected by thousands of malicious attacks. Objective: In this investigation, we provided a general view and a quick understanding of JavaScript Malware Detection (JSMD) research reported in the scientific literature from several perspectives. Method: We performed a Systematic Literature Review (SLR) and quality analysis of published research articles on the topic. We investigated 32 articles published between the year 2009 to the year 2019. Results: Selected 32 papers explained in this article reflect the outline of what was published so far. One of our key findings is the performance of Machine Learning (ML) based detection models were relatively higher than others. We also found that only a few papers were able to achieve high scores according to the quality assessment criteria. Conclusion: In this SLR, we summarized and synthesized the existing JSMD studies to identify the previous research practices and also to shed light on future guidelines in the malware detection space. This study will guide and help future researchers to investigate the previous literature efficiently and effectively.
Author	Sohan, Md. Fahimuzzman Basalamah, Anas
Author_xml	– sequence: 1 givenname: Md. Fahimuzzman orcidid: 0000-0002-4203-4917 surname: Sohan fullname: Sohan, Md. Fahimuzzman email: fahimsohan2@gmail.com organization: Department of Software Engineering, Daffodil International University, Dhaka, Bangladesh – sequence: 2 givenname: Anas surname: Basalamah fullname: Basalamah, Anas organization: Computer Engineering Department, Umm Al-Qura University, Mecca, Saudi Arabia
BookMark	eNp9kU9vEzEQxS1UJErpJ-jFEucE_1l718colFKUCkHgbM3as8jRdh1sp1W-PQ5bUMWBucxoNL-neXqvydkUJyTkirMl58y8W63X19vtUjDBlpJJrg17Qc5F7QuppD57Nr8ilznvWK2urlR7TrYruj3mgvdQgqObUDBBOSSkX_Eh4COFydMvBxhDOdLVBOMxh0zjQD_BA2SXwr7QOxgfoRLvsaArIU5vyMsBxoyXT_2CfP9w_W39cbH5fHO7Xm0WrmFdWXQIig0eXa8bPwyylU1nmETwXrq2B-ehw9b3XGnu-0E7gQ1zolfKoGs1ygtyO-v6CDu7T-Ee0tFGCPb3IqYfFlK1NaLlWgNXIBvsVdPytlNCGqmRG21cp4eq9XbW2qf484C52F08pGo4W9EorSTTmtcrM1-5FHNOOFgXCpw8lwRhtJzZUyR2jsSeIrFPkVRW_sP--fj_1NVMBUT8SxghtBKt_AWKLpmU
CODEN	IAECCG
CitedBy_id	crossref_primary_10_1109_ACCESS_2023_3260027 crossref_primary_10_1145_3572905 crossref_primary_10_3390_math12091272 crossref_primary_10_4218_etrij_2024_0255 crossref_primary_10_3390_w14030309 crossref_primary_10_3390_app122211694
Cites_doi	10.1109/TrustCom.2012.235 10.1109/MALWARE.2009.5403020 10.1109/SYNASC.2014.39 10.1007/978-3-642-10509-8_19 10.1007/978-3-642-35606-3_15 10.1109/AISP.2015.7123508 10.1109/BigDataCongress.2017.85 10.1109/ACCESS.2018.2874098 10.1145/2638404.2737181 10.1016/j.infsof.2011.09.002 10.1016/j.infsof.2017.04.001 10.1109/TKDE.2009.191 10.1145/2666652.2666657 10.1007/978-3-030-00021-9_52 10.1145/3038912.3052674 10.1109/BWCCA.2014.107 10.1145/2903185.2903189 10.1145/2076732.2076785 10.1145/2714576.2714620 10.1002/sec.1441 10.1109/APSEC.2018.00051 10.1109/PST.2014.6890948 10.1186/s13673-018-0125-x 10.1145/2771783.2771814 10.1145/2993600.2993612 10.1007/978-981-10-6544-6_14 10.1109/ICCT.2017.8359972 10.23919/APCC.2017.8303992 10.1109/SECPRI.2001.924286 10.2197/ipsjjip.23.579 10.3390/sym11020212 10.1109/DSN.2014.92 10.1145/2381896.2381911 10.1002/sec.1064 10.1016/j.dcan.2019.01.005 10.1145/2435349.2435364 10.1109/IJCNN.2018.8489414 10.12968/bjon.2008.17.1.28059 10.1007/978-3-319-93411-2_14 10.1145/1772690.1772720 10.1016/j.asoc.2019.105721 10.1016/j.asoc.2014.11.023 10.1145/2381896.2381901 10.1016/j.infsof.2013.02.009 10.4236/jis.2014.52006 10.1109/PST.2012.6297926 10.1109/TDSC.2017.2675881 10.6028/NIST.SP.800-83r1
ContentType	Journal Article
Copyright	Copyright The Institute of Electrical and Electronics Engineers, Inc. (IEEE) 2020
Copyright_xml	– notice: Copyright The Institute of Electrical and Electronics Engineers, Inc. (IEEE) 2020
DBID	97E ESBDL RIA RIE AAYXX CITATION 7SC 7SP 7SR 8BQ 8FD JG9 JQ2 L7M L~C L~D DOA
DOI	10.1109/ACCESS.2020.3031690
DatabaseName	IEEE All-Society Periodicals Package (ASPP) 2005–Present IEEE Xplore Open Access Journals IEEE All-Society Periodicals Package (ASPP) 1998–Present IEEE/IET Electronic Library CrossRef Computer and Information Systems Abstracts Electronics & Communications Abstracts Engineered Materials Abstracts METADEX Technology Research Database Materials Research Database ProQuest Computer Science Collection Advanced Technologies Database with Aerospace Computer and Information Systems Abstracts Academic Computer and Information Systems Abstracts Professional DOAJ Open Access Full Text
DatabaseTitle	CrossRef Materials Research Database Engineered Materials Abstracts Technology Research Database Computer and Information Systems Abstracts – Academic Electronics & Communications Abstracts ProQuest Computer Science Collection Computer and Information Systems Abstracts Advanced Technologies Database with Aerospace METADEX Computer and Information Systems Abstracts Professional
DatabaseTitleList	Materials Research Database
Database_xml	– sequence: 1 dbid: DOA name: DOAJ Open Access Full Text url: https://www.doaj.org/ sourceTypes: Open Website – sequence: 2 dbid: RIE name: IEEE/IET Electronic Library url: https://ieeexplore.ieee.org/ sourceTypes: Publisher
DeliveryMethod	fulltext_linktorsrc
Discipline	Engineering
EISSN	2169-3536
EndPage	190552
ExternalDocumentID	oai_doaj_org_article_166a15a34eb547178523936e1969c86f 10_1109_ACCESS_2020_3031690 9226527
Genre	orig-research
GroupedDBID	0R~ 4.4 5VS 6IK 97E AAJGR ABAZT ABVLG ACGFS ADBBV AGSQL ALMA_UNASSIGNED_HOLDINGS BCNDV BEFXN BFFAM BGNUA BKEBE BPEOZ EBS EJD ESBDL GROUPED_DOAJ IPLJI JAVBF KQ8 M43 M~E O9- OCL OK1 RIA RIE RNS AAYXX CITATION 7SC 7SP 7SR 8BQ 8FD JG9 JQ2 L7M L~C L~D
ID	FETCH-LOGICAL-c408t-8ea50fdecb64dff37348903eadd3c7bacda8e7db1561dbf6c2e40c2b559ec76e3
IEDL.DBID	DOA
ISICitedReferencesCount	9
ISICitedReferencesURI	http://www.webofscience.com/api/gateway?GWVersion=2&SrcApp=Summon&SrcAuth=ProQuest&DestLinkType=CitingArticles&DestApp=WOS_CPL&KeyUT=000584856800001&url=https%3A%2F%2Fcvtisr.summon.serialssolutions.com%2F%23%21%2Fsearch%3Fho%3Df%26include.ft.matches%3Dt%26l%3Dnull%26q%3D
ISSN	2169-3536
IngestDate	Fri Oct 03 12:44:49 EDT 2025 Sun Nov 30 03:45:04 EST 2025 Sat Nov 29 04:14:18 EST 2025 Tue Nov 18 21:08:06 EST 2025 Wed Aug 27 02:31:53 EDT 2025
IsDoiOpenAccess	true
IsOpenAccess	true
IsPeerReviewed	true
IsScholarly	true
Language	English
License	https://creativecommons.org/licenses/by/4.0/legalcode
LinkModel	DirectLink
MergedId	FETCHMERGED-LOGICAL-c408t-8ea50fdecb64dff37348903eadd3c7bacda8e7db1561dbf6c2e40c2b559ec76e3
Notes	ObjectType-Article-1 SourceType-Scholarly Journals-1 ObjectType-Feature-2 content type line 14
ORCID	0000-0002-4203-4917
OpenAccessLink	https://doaj.org/article/166a15a34eb547178523936e1969c86f
PQID	2456530661
PQPubID	4845423
PageCount	14
ParticipantIDs	crossref_primary_10_1109_ACCESS_2020_3031690 doaj_primary_oai_doaj_org_article_166a15a34eb547178523936e1969c86f proquest_journals_2456530661 ieee_primary_9226527 crossref_citationtrail_10_1109_ACCESS_2020_3031690
PublicationCentury	2000
PublicationDate	20200000 2020-00-00 20200101 2020-01-01
PublicationDateYYYYMMDD	2020-01-01
PublicationDate_xml	– year: 2020 text: 20200000
PublicationDecade	2020
PublicationPlace	Piscataway
PublicationPlace_xml	– name: Piscataway
PublicationTitle	IEEE access
PublicationTitleAbbrev	Access
PublicationYear	2020
Publisher	IEEE The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher_xml	– name: IEEE – name: The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
References	ref13 ref12 ref15 ref14 ref53 ref52 ref11 ref54 ref10 ref17 ref16 ref19 ref18 ref51 ref50 wahono (ref49) 2015; 1 ref46 ref45 ref48 kitchenham (ref41) 2004; 33 ref47 ref42 ref44 ref43 ref8 ref7 ref9 ref4 ref3 ref6 ref34 ref37 ref36 ref31 ref30 ref33 ref32 ref2 ref1 ref39 landage (ref38) 2013; 2 (ref35) 2020 robiah (ref55) 2009; 5 ref24 ref23 ref26 ref25 ref20 ref22 ref21 ref28 ref27 ref29 curtsinger (ref5) 2011 kitchenham (ref40) 2007
References_xml	– ident: ref8 doi: 10.1109/TrustCom.2012.235 – volume: 33 start-page: 1 year: 2004 ident: ref41 article-title: Procedures for performing systematic reviews publication-title: Keele U K Keele Univ – ident: ref3 doi: 10.1109/MALWARE.2009.5403020 – ident: ref20 doi: 10.1109/SYNASC.2014.39 – ident: ref1 doi: 10.1007/978-3-642-10509-8_19 – volume: 5 year: 2009 ident: ref55 article-title: A new generic taxonomy on hybrid malware detection publication-title: Int J Comput Sci Inf Secur – ident: ref10 doi: 10.1007/978-3-642-35606-3_15 – ident: ref19 doi: 10.1109/AISP.2015.7123508 – ident: ref54 doi: 10.1109/BigDataCongress.2017.85 – ident: ref27 doi: 10.1109/ACCESS.2018.2874098 – ident: ref12 doi: 10.1145/2638404.2737181 – ident: ref46 doi: 10.1016/j.infsof.2011.09.002 – ident: ref45 doi: 10.1016/j.infsof.2017.04.001 – ident: ref53 doi: 10.1109/TKDE.2009.191 – ident: ref13 doi: 10.1145/2666652.2666657 – ident: ref29 doi: 10.1007/978-3-030-00021-9_52 – ident: ref24 doi: 10.1145/3038912.3052674 – year: 2007 ident: ref40 article-title: Guidelines for performing systematic literature reviews in software engineering – ident: ref33 doi: 10.1109/BWCCA.2014.107 – ident: ref22 doi: 10.1145/2903185.2903189 – ident: ref4 doi: 10.1145/2076732.2076785 – ident: ref17 doi: 10.1145/2714576.2714620 – ident: ref23 doi: 10.1002/sec.1441 – ident: ref32 doi: 10.1109/APSEC.2018.00051 – ident: ref15 doi: 10.1109/PST.2014.6890948 – ident: ref37 doi: 10.1186/s13673-018-0125-x – ident: ref18 doi: 10.1145/2771783.2771814 – ident: ref21 doi: 10.1145/2993600.2993612 – ident: ref25 doi: 10.1007/978-981-10-6544-6_14 – ident: ref34 doi: 10.1109/ICCT.2017.8359972 – ident: ref26 doi: 10.23919/APCC.2017.8303992 – ident: ref52 doi: 10.1109/SECPRI.2001.924286 – ident: ref48 doi: 10.2197/ipsjjip.23.579 – ident: ref43 doi: 10.3390/sym11020212 – year: 2020 ident: ref35 publication-title: Malware Statistics & Trends Report by AV-TEST – ident: ref14 doi: 10.1109/DSN.2014.92 – ident: ref9 doi: 10.1145/2381896.2381911 – volume: 2 start-page: 181 year: 2013 ident: ref38 article-title: Malware and malware detection techniques: A survey publication-title: Int J Eng Res Technol – ident: ref16 doi: 10.1002/sec.1064 – ident: ref44 doi: 10.1016/j.dcan.2019.01.005 – ident: ref11 doi: 10.1145/2435349.2435364 – ident: ref28 doi: 10.1109/IJCNN.2018.8489414 – ident: ref39 doi: 10.12968/bjon.2008.17.1.28059 – ident: ref30 doi: 10.1007/978-3-319-93411-2_14 – ident: ref2 doi: 10.1145/1772690.1772720 – ident: ref31 doi: 10.1016/j.asoc.2019.105721 – ident: ref42 doi: 10.1016/j.asoc.2014.11.023 – ident: ref6 doi: 10.1145/2381896.2381901 – start-page: 33 year: 2011 ident: ref5 article-title: ZOZZLE: Fast and precise in-browser Javascript malware detection publication-title: Proc Usenix Secur Symp – volume: 1 start-page: 1 year: 2015 ident: ref49 article-title: A systematic literature review of software defect prediction publication-title: J Softw Eng – ident: ref47 doi: 10.1016/j.infsof.2013.02.009 – ident: ref50 doi: 10.4236/jis.2014.52006 – ident: ref7 doi: 10.1109/PST.2012.6297926 – ident: ref51 doi: 10.1109/TDSC.2017.2675881 – ident: ref36 doi: 10.6028/NIST.SP.800-83r1
SSID	ssj0000816957
Score	2.2610147
SecondaryResourceType	review_article
Snippet	Context: JavaScript (JS) is an often-used programming language by millions of web pages and is also affected by thousands of malicious attacks. Objective: In...
SourceID	doaj proquest crossref ieee
SourceType	Open Website Aggregation Database Enrichment Source Index Database Publisher
StartPage	190539
SubjectTerms	Bibliographies Cybersecurity Data mining Investigations Java javascript attacks javascript malware detection Literature reviews Machine learning malicious code detection Malware Quality assessment systematic literature review Systematic review Systematics Websites
SummonAdditionalLinks	– databaseName: IEEE/IET Electronic Library dbid: RIE link: http://cvtisr.summon.serialssolutions.com/2.0.0/link/0/eLvHCXMwlV3PSxwxFH6s4qE9aKstXbWSg0dHZzKTZOa4rl2KVBFU8BYyyQsUZFbWteJ_70smOwiWQm_DkDdk8r3k_UjyPYDDivtcWOmzYKyzilQoM1yJrC25MTJHstAuFptQl5f13V1zNYKj4S4MIsbDZ3gcHuNevpvbp5AqO2nIVxBcrcGaUrK_qzXkU0IBiUaoRCxU5M3JZDqlf6AQkFNkSrorw7r7xvhEjv5UVOXdShzNy2zr_zr2CTaTG8kmPe6fYYTdNnx8Qy64A9cTdj3QNLNfA30y67cDmOkc6xk0XtiKmoTNPTs34XRqWEvYhbl_NiRxhst4Yqv7ArezHzfTn1kqoZDZKq-XWY1G5N6hbWXlvC8Dl02Tl6Q-rrSqNdaZGpVrKYorXOul5VjllrcUZ6BVEsuvsN7NO_wGzJKn03huRV1ipUg4koqSv0BOXF14Owa-GlttE794KHNxr2OckTe6B0QHQHQCZAxHg9BDT6_x7-anAbShaeDGji8IDZ2mmi6kNIUwZYWtINOrahFo3iQGIiBbSz-GnYDg8JEE3hj2Vyqg0zx-1HFbmKIqWez-XWoPPoQO9kmZfVhfLp7wO2zYP8vfj4uDqKKvZhzjAg priority: 102 providerName: IEEE
Title	A Systematic Literature Review and Quality Analysis of Javascript Malware Detection
URI	https://ieeexplore.ieee.org/document/9226527 https://www.proquest.com/docview/2456530661 https://doaj.org/article/166a15a34eb547178523936e1969c86f
Volume	8
WOSCitedRecordID	wos000584856800001&url=https%3A%2F%2Fcvtisr.summon.serialssolutions.com%2F%23%21%2Fsearch%3Fho%3Df%26include.ft.matches%3Dt%26l%3Dnull%26q%3D
hasFullText	1
inHoldings	1
isFullTextHit
isPrint
journalDatabaseRights	– providerCode: PRVAON databaseName: DOAJ Open Access Full Text customDbUrl: eissn: 2169-3536 dateEnd: 99991231 omitProxy: false ssIdentifier: ssj0000816957 issn: 2169-3536 databaseCode: DOA dateStart: 20130101 isFulltext: true titleUrlDefault: https://www.doaj.org/ providerName: Directory of Open Access Journals – providerCode: PRVHPJ databaseName: ROAD: Directory of Open Access Scholarly Resources customDbUrl: eissn: 2169-3536 dateEnd: 99991231 omitProxy: false ssIdentifier: ssj0000816957 issn: 2169-3536 databaseCode: M~E dateStart: 20130101 isFulltext: true titleUrlDefault: https://road.issn.org providerName: ISSN International Centre
link	http://cvtisr.summon.serialssolutions.com/2.0.0/link/0/eLvHCXMwrZ1LS8QwEICDLB70IOoq1hc5eLRsmjaPHtfVRURFWIW9hTRNQJAqa1W8-NudpN1SEPTipYeStM1kOo80_Qahk4w6wgx3sXfWcQYqFGsqWFykVGtOLHjoMhSbELe3cj7P73qlvvyesAYP3AhulHCuE6bTzBYMDKmQzEO7uPVYFyO589aXiLyXTAUbLBOeM9FihhKSj8aTCYwIEkIKeSpoMvdWuOeKArG_LbHywy4HZzPdRBttlIjHzdNtoRVbbaP1HjtwiGZjPOsozPi6oyPjZrUf66rEDSDjEy_JI_jZ4SvtN596U4Fv9NOHhh7ntg4bsqod9DC9uJ9cxm2FhNhkRNaxtJoRV1pT8Kx0LvWompykoB1lakShTamlFWUBSVpSFo4bajNiaAFphDWC23QXDarnyu4hbCCQyR01TKY2E9A5MEMhHIAYTSbORIguhaVMiw_3VSyeVEgjSK4aCSsvYdVKOEKnXaeXhp7xe_MzPwtdU4--DidAIVSrEOovhYjQ0M9hd5EcAkxGRYQOl3Oq2tf0VYWvvpA08WT_P259gNb8cJoVmkM0qBdv9gitmvf68XVxHDQUjjdfF8fhP8Nvk_rmeQ
linkProvider	Directory of Open Access Journals
linkToHtml	http://cvtisr.summon.serialssolutions.com/2.0.0/link/0/eLvHCXMwlV3daxQxEB9qFbQPflXp1ap58LFrs9l87D5eT0vV6yG0Qt9CNjuBQtmT9lrxv-8km1sKiuDbsmSWbH6TzEeS3wB8kCJw5XUoorEuJKlQ4YRRRVsJ5zRHstBdKjZhFov6_Lz5vgH7410YREyHz_BjfEx7-d3S38RU2UFDvoIS5gE8VFIKPtzWGjMqsYREo0ymFip5czCdzegvKAgUFJuS9uq48t4zP4mlP5dV-WMtTgbm6Nn_de05PM2OJJsOyL-ADexfwtY9esFtOJ2y05Gomc1HAmU2bAgw13ds4ND4zdbkJGwZ2FcXz6fG1YSduMtfjiQ-4Sqd2epfwY-jz2ez4yIXUSi85PWqqNEpHjr0rZZdCFVks2l4RQrUVd60zneuRtO1FMeVXRu0Fyi5Fy1FGuiNxuo1bPbLHneAefJ1miC8qiuUhoQTrSh5DOTG1WXwExDrsbU-M4zHQheXNkUavLEDIDYCYjMgE9gfhX4OBBv_bn4YQRubRnbs9ILQsHmy2VJrVypXSWwVGV9Tq0j0pjFSAflahwlsRwTHj2TwJrC3VgGbZ_K1TRvDFFfpcvfvUu_h8fHZydzOvyy-vYEnsbNDimYPNldXN_gWHvnb1cX11bukrndZX-ZJ
openUrl	ctx_ver=Z39.88-2004&ctx_enc=info%3Aofi%2Fenc%3AUTF-8&rfr_id=info%3Asid%2Fsummon.serialssolutions.com&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Ajournal&rft.genre=article&rft.atitle=A+Systematic+Literature+Review+and+Quality+Analysis+of+Javascript+Malware+Detection&rft.jtitle=IEEE+access&rft.au=Sohan%2C+Md.+Fahimuzzman&rft.au=Basalamah%2C+Anas&rft.date=2020&rft.issn=2169-3536&rft.eissn=2169-3536&rft.volume=8&rft.spage=190539&rft.epage=190552&rft_id=info:doi/10.1109%2FACCESS.2020.3031690&rft.externalDBID=n%2Fa&rft.externalDocID=10_1109_ACCESS_2020_3031690
thumbnail_l	http://covers-cdn.summon.serialssolutions.com/index.aspx?isbn=/lc.gif&issn=2169-3536&client=summon
thumbnail_m	http://covers-cdn.summon.serialssolutions.com/index.aspx?isbn=/mc.gif&issn=2169-3536&client=summon
thumbnail_s	http://covers-cdn.summon.serialssolutions.com/index.aspx?isbn=/sc.gif&issn=2169-3536&client=summon