Patent ID: 8832834

Claim:
A webshell detection and response system, comprises: a script interlocking unit that processes interlocking with an information collection script that is inserted into a webpage home path of a detection target server to collect information from the detection target server; a database (DB) management unit that stores, in a DB, integrity hash information for verifying integrity of each of webpage constituent contents of the detection target server in advance and manages the stored hash information; and an information analysis unit that compares current hash information of each of the webpage constituent contents of the detection target server periodically or non-periodically collected by the information collection script interlocked by the script interlocking unit and the integrity hash information of each of the webpage constituent contents of the detection target server that is stored by the DB management unit to thereby retrieve a modulated webpage constituent content, wherein the script interlocking unit, the database (DB) management unit, the information analysis unit, or any combination thereof is implemented by a processor.