Unlock instant, AI-driven research and patent intelligence for your innovation.

Webshell detection method, device and equipment , and readable storage medium

A detection method and code detection technology, applied in the field of information security, can solve the problems of large image file size, slow speed, affecting other services of the website server, etc., and achieve the effect of reducing resource consumption and improving detection speed.

Active Publication Date: 2021-12-17
CHINANETCENT TECH
View PDF6 Cites 1 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004]However, due to the large size of the image file, using the above-mentioned webshell detection method consumes a lot of resources, is slow and affects other services of the website server

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Webshell detection method, device and equipment , and readable storage medium
  • Webshell detection method, device and equipment , and readable storage medium
  • Webshell detection method, device and equipment , and readable storage medium

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0027] In order to make the purpose, technical solution and advantages of the present application clearer, the implementation manners of the present application will be further described in detail below in conjunction with the accompanying drawings.

[0028] Webshell is also known as web script Trojan horse, web backdoor, etc. A command execution environment that exists in the form of a file. The hacker uploads the webpage file containing the webshell to the server, and then uses the webshell to gain access to the server, and uses the server to execute arbitrary system commands, add, delete, modify and check files on the system, implant malware, or further attack the intranet and so on. Therefore, in order to maintain the security of the website (Web) server, it is necessary to perform webshell detection on the webpage file.

[0029] Traditional webshell detection methods include regular matching, machine learning algorithms, etc. Through the traditional webshell detection ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a webshell detection method, device and equipment and a readable storage medium. Electronic equipment extracts printable character strings in a webpage file to obtain a character string set, then determines whether a target code exists in the character string set or not, and determines that the webpage file is a webshell file if the target code exists in the character string set. The target code is a printable character string except a normal character string in the character string set. By the adoption of the scheme, webshell detection does not need to be conducted on the whole webpage file, webshell detection can be conducted on the webpage file only by judging whether the target code exists in the character string set of the webpage file or not, and due to the fact that the number of printable character strings in the character string set of one webpage file is small, the number of the printable character strings in the character string set of the webpage file is small, and therefore, the purposes of reducing the resource consumption of webshell detection and improving the webshell detection speed can be achieved.

Description

technical field [0001] The present application relates to the technical field of information security, in particular to a webshell detection method, device, equipment and readable storage medium. Background technique [0002] A webshell is a command execution environment that exists in the form of a web page file, and is a malicious web page backdoor file. After invading a website server, the hacker mixes the webpage backdoor file with the normal webpage file under the web directory of the website server, so as to achieve malicious operations such as data deletion or modification on the website server. [0003] In order to prevent hackers from invading the website server, it is necessary to perform webshell detection on the webpage files. Common webshell detection methods include regular matching, machine learning algorithms, etc. Web page files include text files, image files, and the like. [0004] However, due to the large size of the image file, using the above-mentio...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L29/06H04L29/08G06F21/56
CPCH04L63/1408H04L63/1416H04L67/02G06F21/563G06F2221/033
Inventor 刘卓龙
Owner CHINANETCENT TECH