{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,12]],"date-time":"2026-09-12T02:28:41Z","timestamp":1789180121193,"version":"build-2803163510"},"publisher-location":"New York, NY, USA","reference-count":73,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,7,12]],"date-time":"2023-07-12T00:00:00Z","timestamp":1689120000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,7,12]]},"DOI":"10.1145\/3597926.3598146","type":"proceedings-article","created":{"date-parts":[[2023,7,13]],"date-time":"2023-07-13T16:12:53Z","timestamp":1689264773000},"page":"1420-1432","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":14,"title":["An Empirical Study on the Effects of Obfuscation on Static Machine Learning-Based Malicious JavaScript Detectors"],"prefix":"10.1145","author":[{"given":"Kunlun","family":"Ren","sequence":"first","affiliation":[{"name":"Huazhong University of Science and Technology, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Weizhong","family":"Qiang","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yueming","family":"Wu","sequence":"additional","affiliation":[{"name":"Nanyang Technological University, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yi","family":"Zhou","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Deqing","family":"Zou","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hai","family":"Jin","sequence":"additional","affiliation":[{"name":"Huazhong University of Science and Technology, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,7,13]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Atom: A Hackable Text Editor","unstructured":"2023. Atom: A Hackable Text Editor for the 21st Century . https:\/\/atom.io\/ 2023. Atom: A Hackable Text Editor for the 21st Century. https:\/\/atom.io\/"},{"key":"e_1_3_2_1_2_1","unstructured":"2023. AV Comparative Analyses. https:\/\/blog.virustotal.com\/ 2012 \/08\/avcomparative-analyses-marketing-and.html \t\t\t\t  2023. AV Comparative Analyses. https:\/\/blog.virustotal.com\/ 2012 \/08\/avcomparative-analyses-marketing-and.html"},{"key":"e_1_3_2_1_3_1","unstructured":"2023. Closure-compiler. https:\/\/github.com\/google\/closure-compiler \t\t\t\t  2023. Closure-compiler. https:\/\/github.com\/google\/closure-compiler"},{"key":"e_1_3_2_1_4_1","unstructured":"2023. Closure Compiler: Advanced Compilation. https:\/\/developers.google.com\/ closure\/compiler\/docs\/api-tutorial3 \t\t\t\t  2023. Closure Compiler: Advanced Compilation. https:\/\/developers.google.com\/ closure\/compiler\/docs\/api-tutorial3"},{"key":"e_1_3_2_1_5_1","unstructured":"2023. CodeBERT. https:\/\/github.com\/microsoft\/CodeBERT \t\t\t\t  2023. CodeBERT. https:\/\/github.com\/microsoft\/CodeBERT"},{"key":"e_1_3_2_1_6_1","unstructured":"2023. German Federal Ofice for Information Security. https:\/\/www.bsi.bund.de\/ EN \t\t\t\t  2023. German Federal Ofice for Information Security. https:\/\/www.bsi.bund.de\/ EN"},{"key":"e_1_3_2_1_7_1","unstructured":"2023. Gnirts: Obfuscate String Literals in JavaScript Code. https:\/\/github.com\/ anseki\/gnirts \t\t\t\t  2023. Gnirts: Obfuscate String Literals in JavaScript Code. https:\/\/github.com\/ anseki\/gnirts"},{"key":"e_1_3_2_1_8_1","unstructured":"2023. JaSt-JS AST-Based Analysis. https:\/\/github.com\/Aurore54F\/JaSt \t\t\t\t  2023. JaSt-JS AST-Based Analysis. https:\/\/github.com\/Aurore54F\/JaSt"},{"key":"e_1_3_2_1_9_1","unstructured":"2023. JavaScript Malware Collection. https:\/\/github.com\/HynekPetrak\/ javascript-malware-collection \t\t\t\t  2023. JavaScript Malware Collection. https:\/\/github.com\/HynekPetrak\/ javascript-malware-collection"},{"key":"e_1_3_2_1_10_1","unstructured":"2023. JavaScript-obfuscator: A Powerful Obfuscator for JavaScript and Node.js. https:\/\/github.com\/javascript-obfuscator\/javascript-obfuscator \t\t\t\t  2023. JavaScript-obfuscator: A Powerful Obfuscator for JavaScript and Node.js. https:\/\/github.com\/javascript-obfuscator\/javascript-obfuscator"},{"key":"e_1_3_2_1_11_1","unstructured":"2023. JavaScript Reference. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/ JavaScript\/Reference \t\t\t\t  2023. JavaScript Reference. https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/ JavaScript\/Reference"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"crossref","unstructured":"2023. JSObfu: Obfuscate JavaScript (Beyond Repair) with Ruby. https:\/\/github. com\/rapid7\/jsobfu \t\t\t\t  2023. JSObfu: Obfuscate JavaScript (Beyond Repair) with Ruby. https:\/\/github. com\/rapid7\/jsobfu","DOI":"10.1201\/9781003359609-2"},{"key":"e_1_3_2_1_13_1","unstructured":"2023. JStap: A Static Pre-Filter for Malicious JavaScript Detection. https: \/\/github.com\/Aurore54F\/JStap \t\t\t\t  2023. JStap: A Static Pre-Filter for Malicious JavaScript Detection. https: \/\/github.com\/Aurore54F\/JStap"},{"key":"e_1_3_2_1_14_1","unstructured":"2023. Lexical-jsdetector. https:\/\/github.com\/Aurore54F\/lexical-jsdetector \t\t\t\t  2023. Lexical-jsdetector. https:\/\/github.com\/Aurore54F\/lexical-jsdetector"},{"key":"e_1_3_2_1_15_1","unstructured":"2023. Malicious JavaScript Dataset. https:\/\/github.com\/geeksonsecurity\/jsmalicious-dataset \t\t\t\t  2023. Malicious JavaScript Dataset. https:\/\/github.com\/geeksonsecurity\/jsmalicious-dataset"},{"key":"e_1_3_2_1_16_1","unstructured":"2023. Malware with Your Mocha: Obfuscation and Anti Emulation Tricks in Malicious JavaScript. https:\/\/www.yumpu.com\/s\/0PX6x19R5gw0KWvt \t\t\t\t  2023. Malware with Your Mocha: Obfuscation and Anti Emulation Tricks in Malicious JavaScript. https:\/\/www.yumpu.com\/s\/0PX6x19R5gw0KWvt"},{"key":"e_1_3_2_1_17_1","unstructured":"2023. MDNC-Malware Don't Need Cofee. https:\/\/malware.dontneedcofee.com\/ \t\t\t\t  2023. MDNC-Malware Don't Need Cofee. https:\/\/malware.dontneedcofee.com\/"},{"key":"e_1_3_2_1_18_1","unstructured":"2023. Microsoft Digital Defense Report. https:\/\/query.prod.cms.rt.microsoft. com\/cms\/api\/am\/binary\/RWMFIi \t\t\t\t  2023. Microsoft Digital Defense Report. https:\/\/query.prod.cms.rt.microsoft. com\/cms\/api\/am\/binary\/RWMFIi"},{"key":"e_1_3_2_1_19_1","unstructured":"2023. Online JavaScript Minifier Tool and Compressor with Fast and Simple API Access. https:\/\/www.toptal.com\/developers\/javascript-minifier \t\t\t\t  2023. Online JavaScript Minifier Tool and Compressor with Fast and Simple API Access. https:\/\/www.toptal.com\/developers\/javascript-minifier"},{"key":"e_1_3_2_1_20_1","unstructured":"2023. Scikit-learn: Machine Learning in Python. https:\/\/scikit-learn.org\/stable\/ \t\t\t\t  2023. Scikit-learn: Machine Learning in Python. https:\/\/scikit-learn.org\/stable\/"},{"key":"e_1_3_2_1_21_1","unstructured":"2023. Syntactic-jsdetector. https:\/\/github.com\/Aurore54F\/syntactic-jsdetector \t\t\t\t  2023. Syntactic-jsdetector. https:\/\/github.com\/Aurore54F\/syntactic-jsdetector"},{"key":"e_1_3_2_1_22_1","unstructured":"2023. VirusTotal-Analyze Suspicious Files and URLs to Detect Types of Malware. https:\/\/www.virustotal.com\/ \t\t\t\t  2023. VirusTotal-Analyze Suspicious Files and URLs to Detect Types of Malware. https:\/\/www.virustotal.com\/"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1064"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.3390\/fi14080217"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijhcs.2015.05.005"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.68"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/1963405.1963436"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-014-9321-0"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/1772690.1772720"},{"key":"e_1_3_2_1_30_1","volume-title":"Proceedings of the 20th USENIX Security Symposium.","author":"Curtsinger Charlie","year":"2011","unstructured":"Charlie Curtsinger , Benjamin Livshits , Benjamin G. Zorn , and Christian Seifert . 2011 . ZOZZLE: Fast and Precise In-Browser JavaScript Malware Detection . In Proceedings of the 20th USENIX Security Symposium. Charlie Curtsinger, Benjamin Livshits, Benjamin G. Zorn, and Christian Seifert. 2011. ZOZZLE: Fast and Precise In-Browser JavaScript Malware Detection. In Proceedings of the 20th USENIX Security Symposium."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978313"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101764"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102715"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3345656"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359813"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-93411-2_14"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.findings-emnlp.139"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3178876.3186097"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.acl-long.499"},{"key":"e_1_3_2_1_40_1","volume-title":"Proceedings of the 9th International Conference on Learning Representations (ICLR'21)","author":"Guo Daya","year":"2021","unstructured":"Daya Guo , Shuo Ren , Shuai Lu , Zhangyin Feng , Duyu Tang , Shujie Liu , Long Zhou , Nan Duan , Alexey Svyatkovskiy , Shengyu Fu , Michele Tufano , Shao Kun Deng , Colin B. Clement , Dawn Drain , Neel Sundaresan , Jian Yin , Daxin Jiang , and Ming Zhou . 2021 . GraphCodeBERT: Pre-training Code Representations with Data Flow . In Proceedings of the 9th International Conference on Learning Representations (ICLR'21) . Daya Guo, Shuo Ren, Shuai Lu, Zhangyin Feng, Duyu Tang, Shujie Liu, Long Zhou, Nan Duan, Alexey Svyatkovskiy, Shengyu Fu, Michele Tufano, Shao Kun Deng, Colin B. Clement, Dawn Drain, Neel Sundaresan, Jian Yin, Daxin Jiang, and Ming Zhou. 2021. GraphCodeBERT: Pre-training Code Representations with Data Flow. In Proceedings of the 9th International Conference on Learning Representations (ICLR'21)."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180228"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102218"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-19-9582-8_33"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.33"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2016.04.005"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/3038912.3052674"},{"key":"e_1_3_2_1_48_1","volume-title":"Kipf and Max Welling","author":"Thomas","year":"2016","unstructured":"Thomas N. Kipf and Max Welling . 2016 . Semi-supervised Classification with Graph Convolutional Networks . arXiv preprint arXiv:1609.02907 ( 2016 ). http:\/\/arxiv.org\/abs\/1609.02907 Thomas N. Kipf and Max Welling. 2016. Semi-supervised Classification with Graph Convolutional Networks. arXiv preprint arXiv:1609.02907 ( 2016 ). http:\/\/arxiv.org\/abs\/1609.02907"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.48"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243858"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/2076732"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2009.5403020"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48987.2021.00065"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2019.105721"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23386"},{"key":"e_1_3_2_1_56_1","volume-title":"Proceedings of the 18th USENIX Security Symposium. 169-186","author":"Ratanaworabhan Paruj","unstructured":"Paruj Ratanaworabhan , V. Benjamin Livshits , and Benjamin G. Zorn . 2009. NOZZLE: A Defense Against Heap-spraying Code Injection Attacks . In Proceedings of the 18th USENIX Security Symposium. 169-186 . Paruj Ratanaworabhan, V. Benjamin Livshits, and Benjamin G. Zorn. 2009. NOZZLE: A Defense Against Heap-spraying Code Injection Attacks. In Proceedings of the 18th USENIX Security Symposium. 169-186."},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/2837614.2837671"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.5281\/zenodo.7977493"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/1920261.1920267"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833626"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-92270-2_57"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423616"},{"key":"e_1_3_2_1_63_1","first-page":"768","volume-title":"AMA: Static Code Analysis of Web Page for the Detection of Malicious Scripts. Procedia Computer Science 93 ( 2016 )","author":"Seshagiri Prabhu","year":"2016","unstructured":"Prabhu Seshagiri , Anu Vazhayil , and Padmamala Sriram . 2016 . AMA: Static Code Analysis of Web Page for the Detection of Malicious Scripts. Procedia Computer Science 93 ( 2016 ) , 768 - 773 . Prabhu Seshagiri, Anu Vazhayil, and Padmamala Sriram. 2016. AMA: Static Code Analysis of Web Page for the Detection of Malicious Scripts. Procedia Computer Science 93 ( 2016 ), 768-773."},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313752"},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2016.48"},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1145\/2714576.2714620"},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1002\/spe.2648"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1441"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1145\/2736277.2741630"},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2012.6461002"},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435364"},{"key":"e_1_3_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1145\/2771783"},{"key":"e_1_3_2_1_73_1","volume-title":"Proceedings of the Eighth International Joint Conference on Natural Language Processing, IJCNLP","author":"Zhang Ye","year":"2017","unstructured":"Ye Zhang and Byron C. Wallace . 2017. A Sensitivity Analysis of (and Practitioners' Guide to) Convolutional Neural Networks for Sentence Classification . In Proceedings of the Eighth International Joint Conference on Natural Language Processing, IJCNLP 2017 . 253-263. https:\/\/aclanthology.org\/I17-1026\/ Ye Zhang and Byron C. Wallace. 2017. A Sensitivity Analysis of (and Practitioners' Guide to) Convolutional Neural Networks for Sentence Classification. In Proceedings of the Eighth International Joint Conference on Natural Language Processing, IJCNLP 2017. 253-263. https:\/\/aclanthology.org\/I17-1026\/"},{"key":"e_1_3_2_1_74_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.57"}],"event":{"name":"ISSTA '23: 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis","location":"Seattle WA USA","acronym":"ISSTA '23","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","AITO"]},"container-title":["Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3597926.3598146","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3597926.3598146","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T12:37:59Z","timestamp":1750163879000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3597926.3598146"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,7,12]]},"references-count":73,"alternative-id":["10.1145\/3597926.3598146","10.1145\/3597926"],"URL":"https:\/\/doi.org\/10.1145\/3597926.3598146","relation":{},"subject":[],"published":{"date-parts":[[2023,7,12]]},"assertion":[{"value":"2023-07-13","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}