Session-Based Webshell Detection Using Machine Learning in Web Logs

<table class="table-group" id="tab4"><tr><td><table class="table"><tr><td class="thead-hr" colspan="4"><hr/></td></tr><tr class="thead"><td class="align_left">Model name</td><td class="align_center">Sizes</td><td class="align_center">Entries</td><td class="align_center">Time</td></tr><tr><td class="thead-hr" colspan="4"><hr/></td></tr><tr><td class="align_left" rowspan="2">SB-LSTM</td><td class="align_center">177 kB</td><td class="align_center">908</td><td class="align_center">0.5897 s</td></tr><tr><td class="align_center">46.6 MB</td><td class="align_center">248433</td><td class="align_center">28.7127 s</td></tr><tr class="table-tr"><td colspan="4"><hr class="tbody-hr"/></td></tr></table></td></tr></table>

<div>The influence of the different sizes of logs.</div>

Security and Communication Networks

tab4

Table 4

Table 4: Session-Based Webshell Detection Using Machine Learning in Web Logs 