Skip to content

Commit 4ed5eff

Browse files
committed
Update concepts pt 2
1 parent d58d1eb commit 4ed5eff

File tree

1 file changed

+11
-11
lines changed

1 file changed

+11
-11
lines changed

src/content/docs/page-shield/how-it-works/malicious-script-detection.mdx

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -12,47 +12,47 @@ description: Page Shield implements different mechanisms to determine if a
1212
This feature is available as a paid add-on for customers on an Enterprise plan.
1313
:::
1414

15-
Page Shield implements different mechanisms to determine if a script, or a connection made by a script, is malicious. These mechanisms are:
15+
Cloudflare uses different mechanisms to determine if a script, or a connection made by a script, is malicious. These mechanisms are:
1616

1717
- Malicious script detection
1818
- Malicious URL checks
1919
- Malicious domain checks
2020

21-
Any updates to the threat feeds will trigger new checks for previously detected scripts or connections so that the Page Shield dashboards always reflect the latest categorization.
21+
Any updates to the threat feeds will trigger new checks for previously detected scripts or connections so that the client-side resource monitoring dashboards always reflect the latest categorization.
2222

2323
## Malicious script detection
2424

25-
In this type of detection, Page Shield will download the script file and run it through a classifier. The classifier is a machine learning (ML) model that has learned to detect patterns of malicious operations such as [Magecart-type attacks](https://sansec.io/what-is-magecart).
25+
In this type of detection, Cloudflare will download the script file and run it through a classifier. The classifier is a machine learning (ML) model that has learned to detect patterns of malicious operations such as [Magecart-type attacks](https://sansec.io/what-is-magecart).
2626

2727
The script classifier will output a probability score for the script (also called the JS integrity score) between 1 and 99, where 1 means definitely malicious and 99 means definitely not malicious. This score, together with a threshold value, will determine if the malicious script detection system will classify the script as malicious or not.
2828

29-
The score threshold for considering a script as malicious is currently set to 10. If the script classification score is below this value, the Page Shield dashboards will display the script as being malicious.
29+
The score threshold for considering a script as malicious is currently set to 10. If the script classification score is below this value, the monitoring dashboards will display the script as being malicious.
3030

31-
In addition to the integrity score, Page Shield will also provide individual scores for different malicious code detections (scores from 1 to 99):
31+
In addition to the integrity score, Cloudflare will also provide individual scores for different malicious code detections (scores from 1 to 99):
3232

3333
- **Magecart**
3434
- **Crypto mining**
3535
- **Malware**
3636

37-
You can [configure Malicious Script Alerts](/page-shield/alerts/configure/). You will receive an alert notification as soon as Cloudflare detects JavaScript code classified as malicious in your domain.
37+
You can [configure Malicious Script Alerts](/page-shield/alerts/configure/) to receive an alert notification as soon as Cloudflare detects JavaScript code classified as malicious in your domain.
3838

3939
## Malicious URL checks
4040

41-
Page Shield will search for the URLs of your JavaScript dependencies in threat intelligence feeds to determine if any of those scripts should be categorized as malicious.
41+
Cloudflare will search for the URLs of your JavaScript dependencies in threat intelligence feeds to determine if any of those scripts should be categorized as malicious.
4242

43-
The Page Shield dashboards display the scripts that were considered malicious at the top of the scripts list.
43+
The client-side resource monitoring dashboards display the scripts that were considered malicious at the top of the scripts list.
4444

4545
You can [configure Malicious URL Alerts](/page-shield/alerts/configure/) to receive an alert notification as soon as Cloudflare detects a script from a malicious URL in your domain.
4646

47-
Depending on your current configuration, Page Shield can also search for malicious URLs in the URLs of outgoing connections made by scripts in your domain. To enable this check, you must [allow Page Shield to use the full URLs of outgoing connections](/page-shield/reference/settings/#connection-target-details) instead of only the hostname in Page Shield settings.
47+
Depending on your current configuration, Cloudflare can also search for malicious URLs in the URLs of outgoing connections made by scripts in your domain. To enable this check, you must [allow resource monitoring to use the full URLs of outgoing connections](/page-shield/reference/settings/#connection-target-details) instead of only the hostname in the settings page.
4848

4949
## Malicious domain checks
5050

51-
Page Shield will search for the domains of your client-side JavaScript dependencies in threat feeds to determine if any of those scripts is being served from a known malicious domain.
51+
Cloudflare will search for the domains of your client-side JavaScript dependencies in threat feeds to determine if any of those scripts is being served from a known malicious domain.
5252

5353
A domain previously reported as malicious can later be reported as non-malicious if, after further analysis, the domain is deemed safe.
5454

55-
Page Shield will also check the target domains of connections made by scripts in your domain's pages, following the same approach described for scripts.
55+
Cloudflare will also check the target domains of connections made by scripts in your domain's pages, following the same approach described for scripts.
5656

5757
You can [configure Malicious Domain Alerts](/page-shield/alerts/configure/) to receive an alert notification as soon as Cloudflare detects a malicious script loaded from a known malicious domain in your domain.
5858

0 commit comments

Comments
 (0)