Konloch/bytecode-viewer — pull request #16 by Konloch (2014-12-31 19:07:40+00:00)
Title: Added new "set security manager to null" heuristic to the MaliciousCodeS...

...canner

This new heuristic will look for the following instruction sequence:

aconst_null
invokestatic java/lang/System.setSecurityManager

This sequence will set the security manager to null, which is usually
indicative of a malicious Java applet trying to escape the Java sandbox.