{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,16]],"date-time":"2026-03-16T20:34:47Z","timestamp":1773693287246,"version":"3.50.1"},"reference-count":35,"publisher":"MDPI AG","issue":"9","license":[{"start":{"date-parts":[[2020,8,24]],"date-time":"2020-08-24T00:00:00Z","timestamp":1598227200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61433012"],"award-info":[{"award-number":["61433012"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Innovation Environment Construction Special Project of Xinjiang Uygur Autonomous Region","award":["PT1811"],"award-info":[{"award-number":["PT1811"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Symmetry"],"abstract":"<jats:p>WebShell is a common network backdoor attack that is characterized by high concealment and great harm. However, conventional WebShell detection methods can no longer cope with complex and flexible variations of WebShell attacks. Therefore, this paper proposes a deep super learner for attack detection. First, the collected data are deduplicated to prevent the influence of duplicate data on the result. Second, to detect the results of the algorithm, static and dynamic feature are taken as the feature of the algorithm to construct a comprehensive feature set. We then use the Word2Vec algorithm to vectorize the features. During this period, to prevent the outbreak of the number of features, we use a genetic algorithm to extract the validity of the feature dimension. Finally, we use a deep super learner to detect WebShell. The experimental results show that this algorithm can effectively detect WebShell, and its accuracy and recall are greatly improved.<\/jats:p>","DOI":"10.3390\/sym12091406","type":"journal-article","created":{"date-parts":[[2020,8,25]],"date-time":"2020-08-25T09:24:56Z","timestamp":1598347496000},"page":"1406","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":12,"title":["WebShell Attack Detection Based on a Deep Super Learner"],"prefix":"10.3390","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2251-5545","authenticated-orcid":false,"given":"Zhuang","family":"Ai","sequence":"first","affiliation":[{"name":"College of Information Science and Engineering, Xinjiang University, Urumqi 830000, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nurbol","family":"Luktarhan","sequence":"additional","affiliation":[{"name":"College of Information Science and Engineering, Xinjiang University, Urumqi 830000, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"AiJun","family":"Zhou","sequence":"additional","affiliation":[{"name":"College of Information Science and Engineering, Xinjiang University, Urumqi 830000, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dan","family":"Lv","sequence":"additional","affiliation":[{"name":"College of Information Science and Engineering, Xinjiang University, Urumqi 830000, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2020,8,24]]},"reference":[{"key":"ref_1","unstructured":"National Internet Emergency Center (2020, May 15). Overview of China\u2019s Internet Network Security Situation in 2019. Available online: https:\/\/www.cert.org.cn\/publish\/main\/46\/2020\/20200420191144066734530\/20200420191144066734530_.html."},{"key":"ref_2","first-page":"1","article-title":"Session-Based Webshell Detection Using Machine Learning in Web Logs","volume":"2019","author":"Wu","year":"2019","journal-title":"Secur. Commun. Netw."},{"key":"ref_3","unstructured":"Tu, D.T., Cheng, G., Xiao, J.G., and Wu, B.P. (2014, January 11\u201313). Webshell detection techniques in web applications. Proceedings of the International Conference on Computing, Communication and Networking Technologies (ICCCNT), Hefei, China."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Cui, H., Huang, D., Fang, Y., Liu, L., and Huang, C. (2018, January 18\u201321). Webshell Detection Based on Random Forest\u2013Gradient Boosting Decision Tree Algorithm. Proceedings of the 2018 IEEE Third International Conference on Data Science in Cyberspace (DSC), Guangzhou, China.","DOI":"10.1109\/DSC.2018.00030"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Tianmin, G., Jiemin, Z., and Jian, M. (2019, January 18\u201320). Research on Webshell Detection Method Based on Machine Learning. Proceedings of the 2019 3rd International Conference on Electronic Information Technology and Computer Engineering (EITCE), Xiamen, China.","DOI":"10.1109\/EITCE47263.2019.9094767"},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Fang, Y., Qiu, Y., Liu, L., and Huang, C. (2018, January 12\u201314). Detecting Webshell Based on Random Forest with FastText. Proceedings of the 2018 International Conference on Computing and Artificial Intelligence, Chengdu, China.","DOI":"10.1145\/3194452.3194470"},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Nguyen, N.-H., Le, V.-H., Phung, V.-O., and Du, P.-H. (2019, January 4\u20136). Toward a Deep Learning Approach for Detecting PHP Webshell. Proceedings of the Tenth International Symposium on Information and Communication Technology, Hanoi, Ha Long Bay, Vietnam.","DOI":"10.1145\/3368926.3369733"},{"key":"ref_8","unstructured":"Le, Q., and Mikolov, T. (2014, January 21\u201326). Distributed representations of sentences and documents. Proceedings of the 31st International Conference on Machine Learning, Beijing, China."},{"key":"ref_9","unstructured":"Mikolov, T., Chen, K., Corrado, G.S., and Dean, J. (2013, January 2\u20134). Efficient Estimation of Word Representations in Vector Space. Proceedings of the International Conference on Learning Representations, Scottsdale, Arizona."},{"key":"ref_10","unstructured":"Gennaro, G.D., Buonanno, A., Girolamo, A.D., Ospedale, A., Palmieri, F., and Fedele, G. (2020). An Analysis of Word2Vec for the Italian Language. arXiv."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Li, C., Lu, Y., Wu, J., Zhang, Y., Xia, Z., Wang, T., Yu, D., Chen, X., Liu, P., and Guo, J. (2018, January 23\u201327). LDA Meets Word2Vec: A Novel Model for Academic Abstract Clustering. Proceedings of the Companion Proceedings of the Web Conference 2018, Lyon, France.","DOI":"10.1145\/3184558.3191629"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Tian, W., Li, J., and Li, H. (2018, January 25\u201327). A Method of Feature Selection Based on Word2Vec in Text Categorization. Proceedings of the Chinese Control Conference, Wuhan, China.","DOI":"10.23919\/ChiCC.2018.8483345"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Song, X.-Y., Zhao, Y., Jin, L.-T., Sun, Y., and Liu, T. (2018, January 21\u201323). Research on the Construction of Sentiment Dictionary Based on Word2vec. Proceedings of the 2018 International Conference on Algorithms, Computing and Artificial Intelligence, Sanya, China. Article 70.","DOI":"10.1145\/3302425.3302481"},{"key":"ref_14","unstructured":"Ma, L., and Zhang, Y. (November, January 29). Using Word2Vec to process big text data. Proceedings of the International Conference on Big Data, Santa Clara, CA, USA."},{"key":"ref_15","unstructured":"Xue, B., Fu, C., and Shaobin, Z. (July, January 27). A Study on Sentiment Computing and Classification of Sina Weibo with Word2vec. Proceedings of the International Congress on Big Data, Anchorage, AK, USA."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"16","DOI":"10.1016\/j.compeleceng.2013.11.024","article-title":"A survey on feature selection methods","volume":"40","author":"Chandrashekar","year":"2014","journal-title":"Comput. Electr. Eng."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"321","DOI":"10.1613\/jair.953","article-title":"SMOTE: Synthetic minority over-sampling technique","volume":"16","author":"Chawla","year":"2002","journal-title":"J. Artif. Intell. Res."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"2159","DOI":"10.1109\/JSTARS.2019.2922297","article-title":"Dynamic Synthetic Minority Over-Sampling Technique-Based Rotation Forest for the Classification of Imbalanced Hyperspectral Data","volume":"12","author":"Feng","year":"2019","journal-title":"IEEE J. Sel. Top. Appl. Earth Obs. Remote Sens."},{"key":"ref_19","unstructured":"Guoxun, H., Hui, H., and Wenyuan, W. (2005, January 13\u201315). An Over-sampling Expert System for Learing from Imbalanced Data Sets. Proceedings of the 2005 International Conference on Neural Networks and Brain, Beijing, China."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Liu, S., Ong, M.L., Mun, K.K., Yao, J., and Motani, M. (2019, January 8\u201311). Early Prediction of Sepsis via SMOTE Upsampling and Mutual Information Based Downsampling. Proceedings of the 2019 Computing in Cardiology (CinC), Beijing, China.","DOI":"10.22489\/CinC.2019.239"},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"1182","DOI":"10.21629\/JSEE.2019.06.12","article-title":"Over-sampling algorithm for imbalanced data classification","volume":"30","author":"Xiaolong","year":"2019","journal-title":"J. Syst. Eng. Electron."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Jo, J., Hwang, S., Lee, S., and Lee, Y. (2018, January 12\u201315). Multi-Mode LSTM Network for Energy-Efficient Speech Recognition. Proceedings of the 2018 International SoC Design Conference (ISOCC), Daegu, Korea.","DOI":"10.1109\/ISOCC.2018.8649913"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Yanagisawa, H., Yamashita, T., and Watanabe, H. (2018, January 7\u20139). A study on object detection method from manga images using CNN. Proceedings of the 2018 International Workshop on Advanced Image Technology (IWAIT), Singapore.","DOI":"10.1109\/IWAIT.2018.8369633"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Bai, X. (2018, January 24\u201326). Text classification based on LSTM and attention. Proceedings of the 2018 Thirteenth International Conference on Digital Information Management (ICDIM), Berlin, Germany.","DOI":"10.1109\/ICDIM.2018.8847061"},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Young, S., Abdou, T., and Bener, A. (2018, January 8\u201311). Deep Super Learner: A Deep Ensemble for Classification Problems. Proceedings of the Canadian Conference on Artificial intelligence, Toronto, ON, Canada.","DOI":"10.1007\/978-3-319-89656-4_7"},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Adil, S.H., Ebrahim, M., Raza, K., Ali, S.S.A., and Hashmani, M.A. (2018, January 13\u201314). Liver Patient Classification using Logistic Regression. Proceedings of the 2018 4th International Conference on Computer and Information Sciences (ICCOINS), Kuala Lumpur, Malaysia.","DOI":"10.1109\/ICCOINS.2018.8510581"},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Luo, H., Pan, X., Wang, Q., Ye, S., and Qian, Y. (2019, January 15\u201319). Logistic Regression and Random Forest for Effective Imbalanced Classification. Proceedings of the 2019 IEEE 43rd Annual Computer Software and Applications Conference (COMPSAC), Milwaukee, WI, USA.","DOI":"10.1109\/COMPSAC.2019.00139"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Yang, Z., and Li, D. (2019, January 27\u201330). Application of Logistic Regression with Filter in Data Classification. Proceedings of the 2019 Chinese Control Conference (CCC), Guangzhou, China.","DOI":"10.23919\/ChiCC.2019.8865281"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Huang, K., Shen, L., Chen, K., and Huang, M. (2012, January 10\u201315). Multilayer perceptron learning with particle swarm optimization for well log data inversion. Proceedings of the 2012 International Joint Conference on Neural Networks (IJCNN), Brisbane, Australia.","DOI":"10.1109\/IJCNN.2012.6252707"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Huang, K., Shen, L., and Weng, L. (August, January 31). Radial basis function network for well log data inversion. Proceedings of the 2011 International Joint Conference on Neural Networks, San Jose, CA, USA.","DOI":"10.1109\/IJCNN.2011.6033345"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Li, H., Ji, G., and Ma, Z. (2007, January 18\u201321). A Nonlinear Predictive Model Based on Multilayer Perceptron Network. Proceedings of the 2007 IEEE International Conference on Automation and Logistics, Jinan, China.","DOI":"10.1109\/ICAL.2007.4339035"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Sun, Y., Li, Y., Zeng, Q., and Bian, Y. (2020, January 24\u201326). Application Research of Text Classification Based on Random Forest Algorithm. Proceedings of the 2020 3rd International Conference on Advanced Electronic Materials, Computers and Software Engineering (AEMCSE), Jinan, China.","DOI":"10.1109\/AEMCSE50948.2020.00086"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Li, R., Zhou, L., Zhang, S., Liu, H., Huang, X., and Sun, Z. (2019, January 19\u201321). Software Defect Prediction Based on Ensemble Learning. Proceedings of the 2019 2nd International Conference on Data Science and Information Technology, Seoul, Korea.","DOI":"10.1145\/3352411.3352412"},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Palczewska, A., Palczewski, J., Robinson, R.M., and Neagu, D. (2013, January 14\u201316). Interpreting random forest models using a feature contribution method. Proceedings of the 2013 IEEE 14th International Conference on Information Reuse & Integration (IRI), San Francisco, CA, USA.","DOI":"10.1109\/IRI.2013.6642461"},{"key":"ref_35","unstructured":"Kraft, D. (1988). A Software Package for Sequential Quadratic Programming, Institut fuer Dynamik der Flugsysteme. Technical Report DFVLR-FB 88-28."}],"container-title":["Symmetry"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2073-8994\/12\/9\/1406\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T10:05:35Z","timestamp":1760177135000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2073-8994\/12\/9\/1406"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,8,24]]},"references-count":35,"journal-issue":{"issue":"9","published-online":{"date-parts":[[2020,9]]}},"alternative-id":["sym12091406"],"URL":"https:\/\/doi.org\/10.3390\/sym12091406","relation":{},"ISSN":["2073-8994"],"issn-type":[{"value":"2073-8994","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,8,24]]}}}