WebSHArk 1.0: A Benchmark Collection for Malicious Web Shell Detection


Jinsuk Kim, Dong-Hoon Yoo, Heejin Jang, Kimoon Jeong, Journal of Information Processing Systems Vol. 11, No. 2, pp. 229-238, Jun. 2015  

https://doi.org/10.3745/JIPS.03.0026
Keywords: Benchmark Test Collection, Malicious Web Application, Webshell, Web Shell Collection, Web Shell Detection
Fulltext:

Abstract

Web shells are programs that are written for a specific purpose in Web scripting languages, such as PHP, ASP, ASP.NET, JSP, PERL-CGI, etc. Web shells provide a means to communicate with the server’s operating system via the interpreter of the web scripting languages. Hence, web shells can execute OS specific commands over HTTP. Usually, web attacks by malicious users are made by uploading one of these web shells to compromise the target web servers. Though there have been several approaches to detect such malicious web shells, no standard dataset has been built to compare various web shell detection techniques. In this paper, we present a collection of web shell files, WebSHArk 1.0, as a standard dataset for current and future studies in malicious web shell detection. To provide baseline results for future studies and for the improvement of current tools, we also present some benchmark results by scanning the WebSHArk dataset directory with three web shell scanning tools that are publicly available on the Internet. The WebSHArk 1.0 dataset is only available upon request via email to one of the authors, due to security and legal issues.


Statistics
Show / Hide Statistics

Statistics (Past 3 Years)
Multiple requests among the same browser session are counted as one view.
If you mouse over a chart, the values of data points will be shown.




Cite this article
[APA Style]
Kim, J., Yoo, D., Jang, H., & Jeong, K. (2015). WebSHArk 1.0: A Benchmark Collection for Malicious Web Shell Detection. Journal of Information Processing Systems, 11(2), 229-238. DOI: 10.3745/JIPS.03.0026.

[IEEE Style]
J. Kim, D. Yoo, H. Jang, K. Jeong, "WebSHArk 1.0: A Benchmark Collection for Malicious Web Shell Detection," Journal of Information Processing Systems, vol. 11, no. 2, pp. 229-238, 2015. DOI: 10.3745/JIPS.03.0026.

[ACM Style]
Jinsuk Kim, Dong-Hoon Yoo, Heejin Jang, and Kimoon Jeong. 2015. WebSHArk 1.0: A Benchmark Collection for Malicious Web Shell Detection. Journal of Information Processing Systems, 11, 2, (2015), 229-238. DOI: 10.3745/JIPS.03.0026.