# WTA: A Static Taint Analysis Framework for PHP Webshell
## 3 Motivation
Its Appl._**2011**, \(5\), 57-68. * Microsoft Defender Advanced Threat Protection. Available online: [[https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection](https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection)]([https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection](https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection)) (accessed on 20 March 2021). * [PERSON] et al. (2014) [PERSON]; [PERSON]; [PERSON]; [PERSON] Webshell detection techniques in web applications. In Proceedings of the Fifth International Conference on Computing, Communications and Networking Technologies (ICCCNT), Hefei, China, 11-13 July 2014; pp. 1-7. * [PERSON] and [PERSON] (2006) [PERSON]; [PERSON] Static Detection of Security Vulnerabilities in Scripting Languages. In Proceedings of the 15 th USENIX Security Symposium, Vancouver, BC, Canada, 31 July-4 August 2006; Volume 15, pp. 179-192. * [PERSON] et al. (2012) [PERSON]; [PERSON]; [PERSON] Estimates of success rates of remote arbitrary code execution attacks. _Inf. Manag. Comput. Secur._**2012**, _20_, 107-122. [CrossRef]
* [PERSON] and [PERSON] (2021) [PERSON]; [PERSON] Handling webshell attacks: A systematic mapping and survey. _Comput. Secur._**2021**, _108_, 102366. [CrossRef]
* [PERSON] et al. (2017) [PERSON]; [PERSON]; [PERSON] A matrix decomposition based webshell detection method. In Proceedings of the 2017 International Conference on Cryptography, Security and Privacy, Wuhan, China, 17-19 March 2017; pp. 66-70
* [PERSON] et al. (2000) [PERSON]; [PERSON]; [PERSON] PHP Technology and It's Application. _Comput. Mod._**2000**, \(5\), 86-89. * [PERSON] et al. (2017) [PERSON]; [PERSON]; [PERSON]; [PERSON] CNN-webshell: Malicious web shell detection with convolutional neural network. In Proceedings of the 2017 VI International Conference on Network, Communication and Computing, Kunming, China, 8-10 December 2017; pp. 75-79* [PERSON] et al. (2018) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Web behavior detection based on deep neural network. In Proceedings of the 2018 IEEE SmartWorld, Ubiquitous Intelligence & Computing, Advanced & Trusted Computing, Scalable Computing & Communications, Cloud & Big Data Computing, Internet of People and Smart City Innovation (SmartWorld/S-CALCOM/UIC/ATC/CBDCom/IOP/SCI), Guangzhou, China, 8-12 October 2018; pp. 1911-1916. * [PERSON] and [PERSON] (2016) [PERSON]; [PERSON] Websited detection method research based on web log. _J. Netw. New Media_**2016**, \(2\), 66-73. * [PERSON] et al. (2019) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Session-based webshell detection using machine learning in web logs. _Secur. Commun. Netw._**2019**, _2019_, 3093809. [CrossRef]
* [PERSON] (1968) [PERSON] Programming techniques: Regular expression search algorithm. _Commun. ACM_**1968**, _11_, 419-422. [CrossRef]
* [PERSON] et al. (2021) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Webshell Detection Based on Executable Data Characteristics of PHP Code. _Wirel. Commun. Mob. Comput._**2021**, _2021_, 5533963. [CrossRef]
* D-Shield (2021) D-Shield. Available online: [[http://www.d99](http://www.d99) net.net/]([http://www.d99](http://www.d99) net.net/) (accessed on 14 February 2021). * [PERSON] and [PERSON] (2020) [PERSON]; [PERSON]; [PERSON] Mitigating webshell attacks through machine learning techniques. _Future Internet_**2020**, _12_, 12. [CrossRef]
* [PERSON] and [PERSON] (2005) [PERSON]; [PERSON] Dynamic Taint Analysis for Automatic Detection, Analysis, and SignatureGeneration of Exploits on Commodity Software. In Proceedings of the NDSS Symposium 2005, San Diego, CA, USA, 3 February 2005; Volume 5, pp. 3-4.