Zozzle is a low-overhead solution for detecting and preventing JavaScript malware that is fast enough to be deployed in the browser.
Our approach uses Bayesian classification of hierarchical features of the JavaScript abstract syntax tree to identify syntax elements that are highly predictive of malware.