A Protection Architecture for Malicious JavaScripts on Web Browsers

‘Web-based Cyber Attacks ’ for leaking private information or making target system to denial of service (DoS) are arising. Traditional Web-based cyber attacks hide malwares in the Web pages to make it install and make the client under control. Nowadays, however, these attacks have evolved to ‘Script-based Cyber Attacks ’ which infect the visitors just by accessing a certain Web page, not using malwares. Traditional Web-based cyber attacks can be protected by detecting malwares, but script-based cyber attacks cannot be protected by the former method because no malwares are detected. Therefore, new architecture is necessary to prevent malicious behaviors on Web browsers. In this paper, a protection architecture is introduced to detect the connection requests for URLs which are used by the attacker, to detect Web pages which have malicious scripts, and to prevent the execution of the malicious JavaScript codes