An increase in the number of Maritime Intelligent Transport Systems (MITSs) also means an increase in the number of information security risks. Usually, the administration and operation of MITSs are done through web servers that are frequently targeted by hackers. In marine transportation industry, malicious code injection attacks (webshell) has been widely exploited by hackers to take full control of Web servers. Traditional webshell detection methods based on pattern matching that are no longer effective against new types of webshell. This motivates us to investigate the problem of detecting obfuscation or unknown webshells, termed OUW problem. In this work, we propose a pattern-matching-deep-learning hybrid ASP.NET webshell detection method (H-DLPMWD) to address the OUW problem. H-DLPMWD is based on Yara-based pattern matching to clean dataset; modeling ASP.NET code files as an operation code index (OCI) vectors; and applying CNN method to train and predict webshell in OCI vectors. To validate H-DLPMWD, our rigorous experimentation demonstrates that H-DLPMWD achieves an excellent accuracy of 98.49%, F1-score of 99.01%, and a low false positive rate of 1.75%.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    An Efficient Hybrid Webshell Detection Method for Webserver of Marine Transportation Systems


    Contributors:
    Le, Ha V. (author) / Nguyen, Tu N. (author) / Nguyen, Hoa N. (author) / Le, Linh (author)


    Publication date :

    2023-02-01


    Size :

    1793300 byte




    Type of media :

    Article (Journal)


    Type of material :

    Electronic Resource


    Language :

    English



    Fahrzeugbedienung mittels Webserver

    EBERT ROGER / MÖDL KATHARINA / REISCHL VERENA | European Patent Office | 2021

    Free access

    Boardseitige Webserver-Telematiksysteme und Verfahren

    LEI OLIVER / MURRAY ALLEN R / DRAGESCU JAMES | European Patent Office | 2017

    Free access

    Intelligent Marine Transportation Systems: SMART (Swift Marine Advance Response Transportation Technology)

    Berkowitz, C. / Reardon, M. / Yahalon, S. et al. | British Library Conference Proceedings | 1995


    Marine transportation

    Land, E.S. | Engineering Index Backfile | 1946


    Marine transportation management

    Marcus, Henry S. | TIBKAT | 1987