Webshell detection method and device, electronic equipment and storage medium
A detection method and detection model technology, applied in the field of information security, can solve the problem of low webshell detection accuracy, and achieve the effects of reducing the false positive rate of white samples, improving the accuracy, and strengthening the detection ability.
Active Publication Date: 2021-05-14
BEIJING UNIV OF POSTS & TELECOMM
View PDF5 Cites 7 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0003] In view of this, the purpose of one or more embodiments of this specification is to propose a webshell detection method, device, electronic device and storage medium to solve the problem of low webshell detection accuracy
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0043] In order to make the purpose, technical solutions and advantages of the present disclosure clearer, the present disclosure will be further described in detail below in conjunction with specific embodiments and with reference to the accompanying drawings.
[0044] It should be noted that, unless otherwise defined, the technical terms or scientific terms used in one or more embodiments of the present specification shall have ordinary meanings understood by those skilled in the art to which the present disclosure belongs. "First", "second" and similar words used in one or more embodiments of the present specification do not indicate any order, quantity or importance, but are only used to distinguish different components. "Comprising" or "comprising" and similar words mean that the elements or items appearing before the word include the elements or items listed after the word and their equivalents, without excluding other elements or items. Words such as "connected" or "con...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
One or more embodiments of the present specification provide a webshell detection method and device, electronic equipment and a storage medium. The method comprises: analyzing a PHP source code to obtain a token sequence and a character string constant sequence; enabling the token sequence to be subjected to symbolization, and obtaining the token sequence after symbolization; carrying out vectorization on the token sequence after symbolization, and obtaining a token sequence feature vector; vectorizing the character string constant sequence to obtain a character string constant sequence feature vector. and, by using a webshell detection model, processing the token sequence feature vector and the character string constant sequence feature vector, and obtaining a webshell detection result. The invention has higher capability of detecting confused samples, reduces the false alarm rate of white samples, and improves the accuracy of webshell detection on the whole.
Description
technical field [0001] One or more embodiments of this specification relate to the technical field of information security, and in particular to a webshell detection method, device, electronic device, and storage medium. Background technique [0002] The webshell constructs in the PHP language are diverse and difficult to detect. Currently, existing traffic detection methods are not very accurate in detecting webshells. Contents of the invention [0003] In view of this, the purpose of one or more embodiments of this specification is to provide a webshell detection method, device, electronic device, and storage medium, so as to solve the problem of low webshell detection accuracy. [0004] Based on the above purpose, one or more embodiments of this specification provide a webshell detection method, including: [0005] Parse the PHP source code to get token sequence and string constant sequence; [0006] Symbolizing the token sequence to obtain the token sequence after s...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/56
CPCG06F21/563
Inventor 徐国爱徐国胜王晨宇王浩宇程柏钧
Owner BEIJING UNIV OF POSTS & TELECOMM