SYSTEM AND METHOD FOR DETECTING AND COUNTERING MALICIOUS CODE

A system for detecting and countering malicious code executed on a web application detects a set of configuration parameter values from the web application. The system compares each configuration parameter value with a counterpart from among a set of historical configuration parameter values. The system determines the difference between a configuration parameter with a counterpart historical configuration parameter values. If the system determines that the difference between the configuration parameter and the counterpart historical configuration parameter is more than a threshold rate, the system determines that a malicious code is executed on the web application. In response, the system determines a function associated with the malicious code. The system determines one or more actions to counter the malicious code based on the function of the malicious code. The system executes at least one of the one or more actions.