Malicious scripts and malicious script analysis system using the same analytical methods

Malicious script analysis in accordance with an embodiment of the invention the system dynamic analysis of dynamic run and analyzed by the static analysis module, the decomposition script that static analysis scripts decomposition module, the decomposition script to break up the web page by a script in the document file format Compare the analysis module, the analysis module and the static and dynamic analysis module includes a comparison module for determining whether a malicious script. The present invention is not corresponding to the obfuscation method, it is possible to identify the unknown regardless of hidden dangers HTML tags obfuscation methods to hide the malicious script in a web page. You can also unlike detection products that rely on signature-known because it determines the malicious script using only the risk of emergence of new malicious HTML Tag flexibly when the script cope. The present invention is in the technical organizations and companies that are operating a web server can be utilized to their web servers have been hacked, check that serve as malware yupoji.