{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,16]],"date-time":"2026-05-16T16:19:12Z","timestamp":1778948352522,"version":"3.51.4"},"publisher-location":"Cham","reference-count":16,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030562229","type":"print"},{"value":"9783030562236","type":"electronic"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-56223-6_4","type":"book-chapter","created":{"date-parts":[[2020,9,6]],"date-time":"2020-09-06T15:03:24Z","timestamp":1599404604000},"page":"57-72","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["Enhancing the Feature Profiles of Web Shells by Analyzing the Performance of Multiple Detectors"],"prefix":"10.1007","author":[{"given":"Weiqing","family":"Huang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chenggang","family":"Jia","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Min","family":"Yu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kam-Pui","family":"Chow","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jiuming","family":"Chen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chao","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jianguo","family":"Jiang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,8,6]]},"reference":[{"key":"4_CR1","unstructured":"Acunetix, An Introduction to Web-Shells, London, United Kingdom (www.acunetix.com\/websitesecurity\/introduction-webshells), 2016."},{"key":"4_CR2","unstructured":"Chaitin Tech, CloudWalker Platform, GitHub (github.com\/chai\u00a0tin\/cloudwalker), March 7, 2020."},{"key":"4_CR3","unstructured":"M. Emposha, PHP-Shell-Detector, GitHub (github.com\/emposha\/PHP-Shell-Detector), October 5, 2015."},{"key":"4_CR4","doi-asserted-by":"crossref","unstructured":"Y. Fang, Y. Qiu, L. Liu and C. Huang, Detecting web shells based on random forest with fastText, Proceedings of the International Conference on Computing and Artificial Intelligence, pp. 52\u201356, 2018.","DOI":"10.1145\/3194452.3194470"},{"key":"4_CR5","doi-asserted-by":"crossref","unstructured":"H. Liu, B. Lang, M. Liu and H. Yan, CNN and RNN based payload classification methods for attack detection, Knowledge-Based Systems, vol. 163, pp. 332\u2013341, 2019.","DOI":"10.1016\/j.knosys.2018.08.036"},{"key":"4_CR6","doi-asserted-by":"crossref","unstructured":"Z. Lv, H. Yan and R. Mei, Automatic and accurate detection of web shells based on convolutional neural networks, Proceedings of the China Cyber Security Annual Conference, pp. 73\u201385, 2018.","DOI":"10.1007\/978-981-13-6621-5_6"},{"key":"4_CR7","unstructured":"MITRE Corporation, Web Shell, Bethesda, Maryland (attack.mitre.org\/techniques\/T1100), 2019."},{"key":"4_CR8","doi-asserted-by":"crossref","unstructured":"T. Moore and R. Clayton, Evil searching: Compromise and recompromise of Internet hosts for phishing, Proceedings of the International Conference on Financial Cryptography and Data Security, pp. 256\u2013272, 2009.","DOI":"10.1007\/978-3-642-03549-4_16"},{"key":"4_CR9","unstructured":"D. Rethans, More Source Analysis with VLD (derickrethans.nl\/more-source-analysis-with-vld.html), February 19, 2010."},{"key":"4_CR10","unstructured":"ShellPub.com, Webshell.Pub, Beijing, China (www.shellpub.com), 2020."},{"key":"4_CR11","unstructured":"Shenzhen Di Element Technology, D Shield, Shenzen, China (www.d99net.net), 2020."},{"key":"4_CR12","doi-asserted-by":"crossref","unstructured":"O. Starov, J. Dahse, S. Ahmad, T. Holz and N. Nikiforakis, No honor among thieves: A large-scale analysis of malicious web shells, Proceedings of the Twenty-Fifth International Conference on World Wide Web, pp. 1021\u20131032, 2016.","DOI":"10.1145\/2872427.2882992"},{"key":"4_CR13","doi-asserted-by":"crossref","unstructured":"J. Voisin, php-malware-finder, GitHub (github.com\/nbs-sys\u00a0tem\/php-malware-finder), May 26, 2020.","DOI":"10.1016\/S0262-1762(20)30144-9"},{"key":"4_CR14","unstructured":"Z. Wang, J. Yang, M. Dai, R. Xu and X. Liang, A method for detecting web shells based on multi-layer perception, Academic Journal of Computing and Information Science, vol. 2(1), pp. 81\u201391, 2019."},{"key":"4_CR15","doi-asserted-by":"crossref","unstructured":"P. Wrench and B. Irwin, Towards a PHP web shell taxonomy using de-obfuscation-assisted similarity analysis, Proceedings of the Information Security for South Africa Conference, 2015.","DOI":"10.1109\/ISSA.2015.7335066"},{"key":"4_CR16","doi-asserted-by":"crossref","unstructured":"B. Yong, X. Liu, Y. Liu, H. Yin, L. Huang and Q. Zhou, Web behavior detection based on deep neural networks, Proceedings of the IEEE SmartWorld, Ubiquitous Intelligence and Computing, Advanced and Trusted Computing, Scalable Computing and Communications, Cloud and Big Data Computing, Internet of People and Smart City Innovation Conferences, pp. 1911\u20131916, 2018.","DOI":"10.1109\/SmartWorld.2018.00320"}],"container-title":["IFIP Advances in Information and Communication Technology","Advances in Digital Forensics XVI"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-56223-6_4","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,6]],"date-time":"2024-09-06T00:03:19Z","timestamp":1725580999000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-56223-6_4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030562229","9783030562236"],"references-count":16,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-56223-6_4","relation":{},"ISSN":["1868-4238","1868-422X"],"issn-type":[{"value":"1868-4238","type":"print"},{"value":"1868-422X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"6 August 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"DigitalForensics","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"IFIP International Conference on Digital Forensics","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"New Delhi","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"India","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"6 January 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"8 January 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"16","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"digitalforensics2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.ifip119.org\/Conferences\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}