SmartDetect: A smart detection scheme for malicious web shell codes via ensemble learning

Zijian Zhang, Meng Li, Liehuang Zhu*, Xinyi Li

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

9 Citations (Scopus)

Abstract

The rapid global spread of the web technology has led to an increase in unauthorized intrusions into computers and networks. Malicious web shell codes used by hackers can often cause extremely harmful consequences. However, the existing detection methods cannot precisely distinguish between the bad codes and the good codes. To solve this problem, we first detected the malicious web shell codes by applying the traditional data mining algorithms: Support Vector Machine, K-Nearest Neighbor, Naive Bayes, Decision Tree, and Convolutional Neural Network. Then, we designed an ensemble learning classifier to further improve the accuracy. Our experimental analysis proved that the accuracy of SmartDetect—our proposed smart detection scheme for malicious web shell codes—was higher than the accuracy of Shell Detector and NeoPI on the dataset collected from Github. Also, the equal-error rate of the detection result of SmartDetect was lower than those of Shell Detector and NeoPI.

Original languageEnglish
Title of host publicationSmart Computing and Communication - 3rd International Conference, SmartCom 2018, Proceedings
EditorsMeikang Qiu
PublisherSpringer Verlag
Pages196-205
Number of pages10
ISBN (Print)9783030057541
DOIs
Publication statusPublished - 2018
Event3rd International Conference on Smart Computing and Communications, SmartCom 2018 - Tokyo, Japan
Duration: 10 Dec 201812 Dec 2018

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume11344 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Conference3rd International Conference on Smart Computing and Communications, SmartCom 2018
Country/TerritoryJapan
CityTokyo
Period10/12/1812/12/18

Keywords

  • Data mining
  • Malicious web shell code
  • Smart detection

Fingerprint

Dive into the research topics of 'SmartDetect: A smart detection scheme for malicious web shell codes via ensemble learning'. Together they form a unique fingerprint.

Cite this