Detecting Obfuscated Malicious Java Script with Snort and Razorback
Summary: At the Hackers 2 Hackers Conference in Sao Paulo, Brazil, a Cisco Talos researcher presented "Detecting Obfuscated Malicious JavaScript with Snort and Razorback," describing a concept built on language-based anomaly detection. The goal is to train a computer, in the form of a Razorback module, to recognize malicious JavaScript the way an experienced analyst or JavaScript programmer does at a glance.
What you should know: The approach targets obfuscated JavaScript, which an analyst can spot immediately but which automated tooling has to be taught to see; the author said he hoped to have functioning source code online at labs.snort.org/razorback/ by the end of 2010.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026