JStill: mostly static detection of obfuscated malicious JavaScript code
Automatic Detection for JavaScript Obfuscation Attacks in Web Pages through String Pattern Analysis