Abstract
Webshell is a common backdoor program of web applications. After an attacker uploads Webshell successfully by using a vulnerability. Attacker can get a command execution environment to control the web server by access Webshell. In this paper, an attack detection technology based on SVM algorithm is proposed by analyzing the network traffic of attackers accessing Webshell. This technology realizes the detection of Webshell attack traffic in HTTP traffic by means of the method of supervised machine learning model. And this technology achieves high accuracy and recall rate. After detecting abnormal traffic, the system can locate the Webshell according to traffic information. And eliminate the backdoor in time to ensuring the security and stability of the web server. So it also can help to monitor the trend of intrusion and network security.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
References
Duan, L.H., Zhang, Z.F., Chen, et al.: Survey of web backdoor detection and protection. Institute of Computer Science and Technology of Peking University, pp. 893–899 (2014)
Jian, K., Ma, D., et al.: Research on Webshell detection method based on decision tree. Netw. New Media Technol. 6, 15–19 (2012). https://doi.org/10.3969/j.issn.2095-347X.2012.06.004
Biwei, H.: Research on Webshell detection method based on Bayesian theory. Sci. Technol. Square 6, 66–70 (2016). https://doi.org/10.3969/j.issn.1671-4792.2016.06.016
Chen, J.-X.: A Method for Detecting Webshell on Windows Platform, pp. 533–535 (2011)
Du, H., Fang, Y.: PHP real time dynamic detection of Webshell. Netw. Secur. Technol. Appl. 12, 120–121, 125 (2014). https://doi.org/10.3969/j.issn.1009-6833.2014.12.074.4. Michalewi
Tu, R.D., Guang, C., Xiaojun, G., et al.: Webshell detection techniques in web applications, pp. 1–7. School of Computer Science & Engineering, Southeast University, Nanjing, China (2014)
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2019 Springer International Publishing AG, part of Springer Nature
About this paper
Cite this paper
Yang, W., Sun, B., Cui, B. (2019). A Webshell Detection Technology Based on HTTP Traffic Analysis. In: Barolli, L., Xhafa, F., Javaid, N., Enokido, T. (eds) Innovative Mobile and Internet Services in Ubiquitous Computing. IMIS 2018. Advances in Intelligent Systems and Computing, vol 773. Springer, Cham. https://doi.org/10.1007/978-3-319-93554-6_31
Download citation
DOI: https://doi.org/10.1007/978-3-319-93554-6_31
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-319-93553-9
Online ISBN: 978-3-319-93554-6
eBook Packages: Intelligent Technologies and RoboticsIntelligent Technologies and Robotics (R0)