BERT-Embedding-Based JSP Webshell Detection on Bytecode Level Using XGBoost

<table class="table-group" id="tab4"><tr><td><table class="table"><tr><td class="thead-hr" colspan="2"><hr/></td></tr><tr class="thead"><td class="align_left">Index</td><td class="align_center">Github source</td></tr><tr><td class="thead-hr" colspan="2"><hr/></td></tr><tr><td class="align_left">#0</td><td class="align_center">LandGrey/webshell-detect-bypass</td></tr><tr><td class="align_left">#1</td><td class="align_center">pureqh/webshell</td></tr><tr><td class="align_left">#2</td><td class="align_center">Sec-Fork/JSPHorse</td></tr><tr class="table-tr"><td colspan="2"><hr class="tbody-hr"/></td></tr></table></td></tr></table>

<div>The main source of encrypted or obfuscated JSP webshells.</div>

Security and Communication Networks

tab4

Table 4

Table 4: BERT-Embedding-Based JSP Webshell Detection on Bytecode Level Using XGBoost 