Towards a PHP webshell taxonomy using deobfuscation-assisted similarity analysis
A Taxonomy of Obfuscating Transformations