Systems and methods for detecting malicious browser-based scripts

A system for detecting malicious browser-based scripts, the system comprising:

• a secure access identification module that identifies an attempt by a web browser to access sensitive information stored on a server;
• an identification module that locates a web browser script installed in the web browser by inspecting Document Object Model nodes in the web browser prior to determining whether to allow the web browser to access the sensitive information;
• a calculation module that calculates a signature hash for the web browser script;
• a query module that:
• queries, using the signature hash, a browser script signature database that associates web browser script signature hashes with script security indicators;
• receives, in response to querying the browser script signature database, a script security indicator associated with the signature hash, the script security indicator indicating whether the web browser script is identified, within the browser script signature database, as a security threat;
• a script security module that applies, based on the script security indicator that indicates whether the web browser script is identified as a security threat, a script security policy associated with the web browser script, the script security policy indicating whether to allow the web browser to access the sensitive information stored on the server;
• at least one processor that executes the secure access identification module, the identification module, the calculation module, the query module, and the script security module.

A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

• identify an attempt by a web browser to access sensitive information stored on a server;
• locate a web browser script installed in the web browser by inspecting Document Object Model nodes in the web browser prior to determining whether to allow the web browser to access the sensitive information;
• calculate a signature hash for the web browser script;
• query, using the signature hash, a browser script signature database that associates web browser script signature hashes with script security indicators;
• receive, in response to querying the browser script signature database, a script security indicator associated with the signature hash, the script security indicator indicating whether the web browser script is identified, within the browser script signature database, as a security threat;
• apply, based on the script security indicator that indicates whether the web browser script is identified as a security threat, a script security policy associated with the web browser script, the script security policy indicating whether to allow the web browser to access the sensitive information stored on the server.