{"id":"https://openalex.org/W4225694316","doi":"https://doi.org/10.1093/comjnl/bxac040","title":"CWSOGG: Catching Web Shell Obfuscation Based on Genetic Algorithm and Generative Adversarial Network","display_name":"CWSOGG: Catching Web Shell Obfuscation Based on Genetic Algorithm and Generative Adversarial Network","publication_year":2022,"publication_date":"2022-03-16","ids":{"openalex":"https://openalex.org/W4225694316","doi":"https://doi.org/10.1093/comjnl/bxac040"},"language":"en","primary_location":{"id":"doi:10.1093/comjnl/bxac040","is_oa":false,"landing_page_url":"https://doi.org/10.1093/comjnl/bxac040","pdf_url":null,"source":{"id":"https://openalex.org/S44643521","display_name":"The Computer Journal","issn_l":"0010-4620","issn":["0010-4620","1460-2067"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Computer Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049756790","display_name":"Bo Pang","orcid":"https://orcid.org/0000-0001-7753-0542"},"institutions":[{"id":"https://openalex.org/I24185976","display_name":"Sichuan University","ror":"https://ror.org/011ashp19","country_code":"CN","type":"education","lineage":["https://openalex.org/I24185976"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bo Pang","raw_affiliation_strings":["School of Cyber Science and Engineering , Sichuan University, Chengdu 610065, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering , Sichuan University, Chengdu 610065, China","institution_ids":["https://openalex.org/I24185976"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113699645","display_name":"Gang Liang","orcid":"https://orcid.org/0000-0002-7153-8014"},"institutions":[{"id":"https://openalex.org/I24185976","display_name":"Sichuan University","ror":"https://ror.org/011ashp19","country_code":"CN","type":"education","lineage":["https://openalex.org/I24185976"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Gang Liang","raw_affiliation_strings":["School of Cyber Science and Engineering , Sichuan University, Chengdu 610065, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering , Sichuan University, Chengdu 610065, China","institution_ids":["https://openalex.org/I24185976"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100758022","display_name":"Jin Yang","orcid":"https://orcid.org/0000-0002-7919-5714"},"institutions":[{"id":"https://openalex.org/I24185976","display_name":"Sichuan University","ror":"https://ror.org/011ashp19","country_code":"CN","type":"education","lineage":["https://openalex.org/I24185976"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Jin Yang","raw_affiliation_strings":["School of Cyber Science and Engineering , Sichuan University, Chengdu 610065, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering , Sichuan University, Chengdu 610065, China","institution_ids":["https://openalex.org/I24185976"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100736141","display_name":"Yijing Chen","orcid":"https://orcid.org/0000-0003-1633-127X"},"institutions":[{"id":"https://openalex.org/I24185976","display_name":"Sichuan University","ror":"https://ror.org/011ashp19","country_code":"CN","type":"education","lineage":["https://openalex.org/I24185976"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yijing Chen","raw_affiliation_strings":["School of Cyber Science and Engineering , Sichuan University, Chengdu 610065, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering , Sichuan University, Chengdu 610065, China","institution_ids":["https://openalex.org/I24185976"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100382963","display_name":"Xinyi Wang","orcid":"https://orcid.org/0000-0003-2658-8650"},"institutions":[{"id":"https://openalex.org/I24185976","display_name":"Sichuan University","ror":"https://ror.org/011ashp19","country_code":"CN","type":"education","lineage":["https://openalex.org/I24185976"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinyi Wang","raw_affiliation_strings":["School of Cyber Science and Engineering , Sichuan University, Chengdu 610065, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering , Sichuan University, Chengdu 610065, China","institution_ids":["https://openalex.org/I24185976"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100665462","display_name":"Wenbo He","orcid":"https://orcid.org/0000-0001-9795-1598"},"institutions":[{"id":"https://openalex.org/I98251732","display_name":"McMaster University","ror":"https://ror.org/02fa3aq29","country_code":"CA","type":"education","lineage":["https://openalex.org/I98251732"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Wenbo He","raw_affiliation_strings":["Department of Computing and Software , McMaster University, Hamilton, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing and Software , McMaster University, Hamilton, Canada","institution_ids":["https://openalex.org/I98251732"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5100758022","https://openalex.org/A5113699645"],"corresponding_institution_ids":["https://openalex.org/I24185976"],"apc_list":{"value":2635,"currency":"GBP","value_usd":3232},"apc_paid":null,"fwci":0.4242,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.5413951,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":96},"biblio":{"volume":"66","issue":"5","first_page":"1295","last_page":"1309"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9775999784469604,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.8793420195579529},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8112752437591553},{"id":"https://openalex.org/keywords/discriminator","display_name":"Discriminator","score":0.7542919516563416},{"id":"https://openalex.org/keywords/generator","display_name":"Generator (circuit theory)","score":0.6261978149414062},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.46429452300071716},{"id":"https://openalex.org/keywords/web-page","display_name":"Web page","score":0.4636799693107605},{"id":"https://openalex.org/keywords/shell","display_name":"Shell (structure)","score":0.4458351135253906},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.42932119965553284},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.42225104570388794},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4213871955871582},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.41650205850601196},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.13493302464485168},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.1344796121120453},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1076381504535675}],"concepts":[{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.8793420195579529},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8112752437591553},{"id":"https://openalex.org/C2779803651","wikidata":"https://www.wikidata.org/wiki/Q5282088","display_name":"Discriminator","level":3,"score":0.7542919516563416},{"id":"https://openalex.org/C2780992000","wikidata":"https://www.wikidata.org/wiki/Q17016113","display_name":"Generator (circuit theory)","level":3,"score":0.6261978149414062},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46429452300071716},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.4636799693107605},{"id":"https://openalex.org/C2781052500","wikidata":"https://www.wikidata.org/wiki/Q2230313","display_name":"Shell (structure)","level":2,"score":0.4458351135253906},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.42932119965553284},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.42225104570388794},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4213871955871582},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.41650205850601196},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.13493302464485168},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1344796121120453},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1076381504535675},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C147176958","wikidata":"https://www.wikidata.org/wiki/Q77590","display_name":"Civil engineering","level":1,"score":0.0},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1093/comjnl/bxac040","is_oa":false,"landing_page_url":"https://doi.org/10.1093/comjnl/bxac040","pdf_url":null,"source":{"id":"https://openalex.org/S44643521","display_name":"The Computer Journal","issn_l":"0010-4620","issn":["0010-4620","1460-2067"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Computer Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10","score":0.6899999976158142}],"awards":[{"id":"https://openalex.org/G1121298045","display_name":"\u57fa\u4e8e\u6df1\u5ea6\u5b66\u4e60\u7684\u7f51\u7edc\u5a01\u80c1\u514d\u75ab\u6280\u672f\u7814\u7a76","funder_award_id":"61872254","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4223694219","display_name":null,"funder_award_id":"62162057","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W1945616565","https://openalex.org/W2243397390","https://openalex.org/W2336291507","https://openalex.org/W2508594588","https://openalex.org/W2549418831","https://openalex.org/W2559655401","https://openalex.org/W2784452215","https://openalex.org/W2793801973","https://openalex.org/W2805465321","https://openalex.org/W2807024897","https://openalex.org/W2884764722","https://openalex.org/W2904873895","https://openalex.org/W2946661411","https://openalex.org/W2963448658","https://openalex.org/W2963857521","https://openalex.org/W2964159373","https://openalex.org/W2969211527","https://openalex.org/W2973251808","https://openalex.org/W2986166181","https://openalex.org/W2991439632","https://openalex.org/W2995145810","https://openalex.org/W3000534264","https://openalex.org/W3018076949","https://openalex.org/W3137176977","https://openalex.org/W3183121011","https://openalex.org/W4288103501","https://openalex.org/W4300511536","https://openalex.org/W6628190228","https://openalex.org/W6640425456","https://openalex.org/W6690607325","https://openalex.org/W6748325151","https://openalex.org/W6760249313","https://openalex.org/W6765861315","https://openalex.org/W6784472380","https://openalex.org/W6786257614","https://openalex.org/W6791900604"],"related_works":["https://openalex.org/W4293202849","https://openalex.org/W1980965563","https://openalex.org/W1489300767","https://openalex.org/W4380714744","https://openalex.org/W2387995142","https://openalex.org/W4319453655","https://openalex.org/W2089959425","https://openalex.org/W4224216661","https://openalex.org/W2964074194","https://openalex.org/W2057775761"],"abstract_inverted_index":{"Abstract":[0],"A":[1],"web":[2,25,33,59,75,120,154,196,204,232,244],"shell":[3,60,197],"is":[4,21,93,108,161,206],"a":[5,38,54,78,199],"backdoor":[6],"used":[7,94,209],"by":[8,41,226,237],"hackers":[9],"to":[10,23,95,151,163,178,192,210],"control":[11],"Web":[12],"servers":[13],"and":[14,18,87,100,127,143,186,208,236],"perform":[15],"privilege":[16],"escalation,":[17],"thus":[19],"it":[20],"crucial":[22],"detect":[24,152],"shells":[26,34,76,121,205,233,245],"effectively.":[27],"However,":[28],"the":[29,46,82,89,110,114,117,125,128,131,137,141,145,158,166,193,212,219,229,240],"detection":[30,61,115,146,220],"of":[31,48,133,140,195,222],"obfuscated":[32,74,102,134,153,231,243],"has":[35,67,174],"always":[36],"been":[37,68,175],"challenge.":[39],"Inspired":[40],"adversarial":[42,56,138],"training":[43,63,113,139],"methods":[44],"in":[45],"field":[47],"computer":[49],"vision,":[50],"this":[51],"paper":[52],"proposes":[53],"generative":[55],"network":[57],"(GAN)-based":[58],"model":[62,147,224],"framework.":[64],"Since":[65],"there":[66],"no":[69],"method":[70],"that":[71,122,218],"can":[72,123],"generate":[73,101],"effectively,":[77],"generator":[79,118],"based":[80,168],"on":[81,169,228,234,239,246],"genetic":[83],"algorithm,":[84],"which":[85],"combines":[86],"optimizes":[88],"pre-set":[90],"obfuscation":[91,98],"methods,":[92],"obtain":[96],"new":[97],"combinations":[99],"samples.":[103,135],"The":[104,214],"whole":[105],"proposed":[106,159],"framework":[107,160],"named":[109],"CWSOGG.":[111,213],"When":[112],"model,":[116],"generates":[119],"bypass":[124],"discriminator,":[126],"discriminator":[129,142,167],"catches":[130],"features":[132,188],"Through":[136],"generator,":[144],"improves":[148],"its":[149],"ability":[150],"shells.":[155],"To":[156],"verify":[157],"flexible":[162],"different":[164],"models,":[165,183],"four":[170],"main":[171],"neural":[172],"networks":[173],"implemented.":[176],"Meanwhile,":[177],"build":[179],"complete":[180],"feature":[181],"extraction":[182],"both":[184],"statistical":[185],"semantic":[187],"are":[189],"extracted.":[190],"Due":[191],"lack":[194],"data,":[198],"clean":[200],"dataset":[201],"containing":[202],"4,375":[203],"constructed":[207],"evaluate":[211],"results":[215],"have":[216],"shown":[217],"accuracy":[221],"each":[223],"increases":[225],"86.71%":[227],"generated":[230],"average":[235],"7.50%":[238],"simulated":[241],"real-world":[242],"average.":[247]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}