Cujo: efficient detection and prevention of drive-by-download attacks
The ghost in the browser: Analysis of web-based malware