A Combined Static and Dynamic Analysis Approach to Detect Malicious Browser Extensions

Algorithm 1

A typical manifest file.

 “name”: “Chrome Extension”,

 “version”: “1.1”,

 “manifest_version”: 2,

 “browser_action”:

  “default_title”: “…”,

  “default_popup”: “popup.html”

 ,

 “permissions”: “bookmarks”, “https://.google.com/”,

 “background”:

  “scripts”: “bj.js”,

  “persistent”: false

 ,

 “content_scripts”:

  “js”: “jquery.js”, “myscripts.js”

 ],

 “content_security_policy”: “script-src ‘self’ ‘unsafe-eval’ https://.google.com;”