A New Method for WebShell Detection Based on Bidirectional GRU and Attention Mechanism

Table 5

PHP-type WebShell detection results.

Method	acc (%)	pre (%)	recall (%)	F1 value (%)
LSTM	98.20	98.10	92.80	95.38
GRU	98.88	98.56	95.80	97.16
Bidirectional LSTM	99.08	98.77	96.60	97.67
Bidirectional GRU	99.12	98.19	97.40	97.79
Bidirectional LSTM + attention	99.32	98.59	98.00	98.29
Bidirectional GRU + attention	99.36	98.21	98.60	98.40

The bold text means the best results in each performance comparison.