# WTA: A Static Taint Analysis Framework for PHP Webshell
## 3 Motivation
Available online: [[https://www.php.net/manual/en/language.variables.superglobals.php](https://www.php.net/manual/en/language.variables.superglobals.php)]([https://www.php.net/manual/en/language.variables.superglobals.php](https://www.php.net/manual/en/language.variables.superglobals.php)) (accessed on 12 January 2021). * Shellpub (2021) Shellpub. Shellpub. Available online: [[https://www.shellpub.com/](https://www.shellpub.com/)]([https://www.shellpub.com/](https://www.shellpub.com/)) (accessed on 14 February 2021). * Sangfor (2019) Sangfor. WebShellkiller. Available online: [[http://edr.sangfor.com.cn/tool/WebShellKillerTool.zip](http://edr.sangfor.com.cn/tool/WebShellKillerTool.zip)]([http://edr.sangfor.com.cn/tool/WebShellKillerTool.zip](http://edr.sangfor.com.cn/tool/WebShellKillerTool.zip)) (accessed on 14 February 2019). * chaitin (2020) chaitin. Cloudwalker. Available online: [[https://github.com/chaitin/cloudwalker/releases/download/webshell-detector-1.0.0/webshell-detector-1.0.0-linux-amd64](https://github.com/chaitin/cloudwalker/releases/download/webshell-detector-1.0.0/webshell-detector-1.0.0-linux-amd64)]([https://github.com/chaitin/cloudwalker/releases/download/webshell-detector-1.0.0/webshell-detector-1.0.0-linux-amd64](https://github.com/chaitin/cloudwalker/releases/download/webshell-detector-1.0.0/webshell-detector-1.0.0-linux-amd64)) (accessed on 14 February 2020). * Cisco-Talos (2021) Cisco-Talos. clamav. Available online: [[https://github.com/Cisco-Talos/clamav/archive/refs/tags/clamav-0.103.3.tar.gz](https://github.com/Cisco-Talos/clamav/archive/refs/tags/clamav-0.103.3.tar.gz)]([https://github.com/Cisco-Talos/clamav/archive/refs/tags/clamav-0.103.3.tar.gz](https://github.com/Cisco-Talos/clamav/archive/refs/tags/clamav-0.103.3.tar.gz)) (accessed on 13 July 2021). * Neo23x0. loki (2021) Neo23x0. loki. Available online: [[https://github.com/Neo23x0/LoKi/releases/download/0.41.0/loki_0.41.0.zip](https://github.com/Neo23x0/LoKi/releases/download/0.41.0/loki_0.41.0.zip)]([https://github.com/Neo23x0/LoKi/releases/download/0.41.0/loki_0.41.0.zip](https://github.com/Neo23x0/LoKi/releases/download/0.41.0/loki_0.41.0.zip)) (accessed on 12 July 2021). * CBL (2021) CBL. Infhotbot.pl. Available online: [[https://www.abuseat.org/findbot.pl](https://www.abuseat.org/findbot.pl)]([https://www.abuseat.org/findbot.pl](https://www.abuseat.org/findbot.pl)) (accessed on 12 July 2021). * PHP (2021) PHP Variable Functions. PHP. Available online: [[https://www.php.net/manual/en/functions.variable-functions.php](https://www.php.net/manual/en/functions.variable-functions.php)]([https://www.php.net/manual/en/functions.variable-functions.php](https://www.php.net/manual/en/functions.variable-functions.php)) (accessed on 12 January 2021). * [PERSON] et al. (2006) [PERSON]; [PERSON] [PERSON]; [PERSON]; [PERSON] Using Generalization and Characterization Techniques in the Anomaly-Based Detection of Web Attacks. In Proceedings of the NDSS Symposium 2006, San Diego, CA, USA, 2 February 2006. * _[PERSON] and [PERSON] (2003)_ _[PERSON]; [PERSON] [PERSON] Anomaly detection of web-based attacks. In Proceedings of the 10 th ACM Conference on Computer and Communications Security, Washington, DC, USA, 27-30 October 2003; pp. 251-261._
* _[PERSON] and [PERSON] (2000)_ _[PERSON]; [PERSON]; [PERSON] A Lightweight Tool for Detecting Web Server Attacks. In Proceedings of the NDSS Symposium 2000, San Diego, CA, USA, 3-4 February 2000._
* _[PERSON] et al. (2020)_ _[PERSON]; [PERSON]; [PERSON]; [PERSON] [PERSON] A Web Shell Detection Method Based on Multiview Feature Fusion. Appl. Sci._ **2020**, _10_, 6274. [CrossRef]
* _[PERSON] et al. (2014)_ _[PERSON]; [PERSON]; [PERSON]; [PERSON] Evil-hunter: A novel web shell detection systembased on scoring scheme. J. Southeast Univ. (Engl. Ed. )_ **2014**, _30_, 278-284._
* _[PERSON] et al. (2018)_ _[PERSON]; [PERSON]; [PERSON]; [PERSON] Static Taint Analysis Traversal with Object Oriented Component for Web File Injection Vulnerability Pattern Detection. Procedia Comput. Sci._ **2018**, _135_, 596-605.