{"id":"https://openalex.org/W4400062893","doi":"https://doi.org/10.1109/msn60784.2023.00066","title":"SWDNet: Stealth Web Shell Detection Technology based on Triplet Network","display_name":"SWDNet: Stealth Web Shell Detection Technology based on Triplet Network","publication_year":2023,"publication_date":"2023-12-14","ids":{"openalex":"https://openalex.org/W4400062893","doi":"https://doi.org/10.1109/msn60784.2023.00066"},"language":"en","primary_location":{"id":"doi:10.1109/msn60784.2023.00066","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/msn60784.2023.00066","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 19th International Conference on Mobility, Sensing and Networking (MSN)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101796857","display_name":"Jinli Zhang","orcid":"https://orcid.org/0000-0002-5885-2519"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinli Zhang","raw_affiliation_strings":["Institute of Information Engineering,Chinese Academy of Sciences,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,Chinese Academy of Sciences,Beijing,China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102377981","display_name":"Feng Dai","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Feng Dai","raw_affiliation_strings":["Institute of Information Engineering,Chinese Academy of Sciences,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,Chinese Academy of Sciences,Beijing,China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020641983","display_name":"Yaqin Cao","orcid":"https://orcid.org/0000-0002-2568-2517"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yaqin Cao","raw_affiliation_strings":["Institute of Information Engineering,Chinese Academy of Sciences,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,Chinese Academy of Sciences,Beijing,China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111240373","display_name":"Ru Tan","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ru Tan","raw_affiliation_strings":["Institute of Information Engineering,Chinese Academy of Sciences,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,Chinese Academy of Sciences,Beijing,China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055905208","display_name":"Xiang Cui","orcid":"https://orcid.org/0000-0003-4779-4365"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiang Cui","raw_affiliation_strings":["Zhongguancun Laboratory,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhongguancun Laboratory,Beijing,China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004834139","display_name":"Qixu Liu","orcid":"https://orcid.org/0000-0003-0895-9585"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qixu Liu","raw_affiliation_strings":["Institute of Information Engineering,Chinese Academy of Sciences,Beijing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,Chinese Academy of Sciences,Beijing,China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"6","issue":null,"first_page":"406","last_page":"414"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9854999780654907,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9854999780654907,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9556999802589417,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9434999823570251,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/shell","display_name":"Shell (structure)","score":0.7039540410041809},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5911275148391724},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.33360010385513306},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.15384837985038757},{"id":"https://openalex.org/keywords/mechanical-engineering","display_name":"Mechanical engineering","score":0.05017998814582825}],"concepts":[{"id":"https://openalex.org/C2781052500","wikidata":"https://www.wikidata.org/wiki/Q2230313","display_name":"Shell (structure)","level":2,"score":0.7039540410041809},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5911275148391724},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.33360010385513306},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.15384837985038757},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.05017998814582825}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/msn60784.2023.00066","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/msn60784.2023.00066","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 19th International Conference on Mobility, Sensing and Networking (MSN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321133","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35"},{"id":"https://openalex.org/F4320335892","display_name":"Youth Innovation Promotion Association","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W1832693441","https://openalex.org/W2073178641","https://openalex.org/W2157364932","https://openalex.org/W2158698691","https://openalex.org/W2171035369","https://openalex.org/W2336291507","https://openalex.org/W2587209459","https://openalex.org/W2793801973","https://openalex.org/W2805465321","https://openalex.org/W2901745180","https://openalex.org/W2963775347","https://openalex.org/W2991439632","https://openalex.org/W2995145810","https://openalex.org/W3008554538","https://openalex.org/W3028039738","https://openalex.org/W3046453918","https://openalex.org/W3080126850","https://openalex.org/W3082841960","https://openalex.org/W3084240427","https://openalex.org/W3130346876","https://openalex.org/W3133666709","https://openalex.org/W3137176977","https://openalex.org/W3168918750","https://openalex.org/W3210656068","https://openalex.org/W4296499547","https://openalex.org/W4312554891","https://openalex.org/W4385208592","https://openalex.org/W6759246942"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W2382290278","https://openalex.org/W4395014643"],"abstract_inverted_index":{"Amid":[0],"escalating":[1],"cyber":[2],"threats,":[3],"websites":[4],"have":[5],"emerged":[6],"as":[7],"predominant":[8],"targets":[9],"for":[10,103],"attackers":[11],"employing":[12],"web":[13,53,87,93,106,114,127,202],"shells":[14,115],"to":[15,79],"maintain":[16],"extended":[17],"control.":[18],"Web":[19],"shells,":[20,88,94,128],"frequently":[21],"used":[22],"by":[23,67,200],"Advanced":[24],"Persistent":[25],"Threat":[26],"(APT)":[27],"groups,":[28],"often":[29],"result":[30],"in":[31,111,194],"significant":[32],"damage,":[33],"despite":[34],"the":[35,48,52,62,72,104,151,189,196],"conspicuous":[36],"lack":[37],"of":[38,51,74,143,178,184,191],"focused":[39],"academic":[40],"research":[41],"on":[42],"their":[43,68],"detection.":[44],"This":[45,108],"paper":[46],"illuminates":[47],"stealth":[49,92,105,113,201],"variant":[50],"shell,":[54],"covertly":[55],"embedded":[56],"within":[57],"benign":[58,89,117],"files,":[59,90],"and":[60,71,91,146,164,180],"addresses":[61],"unique":[63],"detection":[64,101,166,169],"challenges":[65],"presented":[66],"covert":[69],"nature":[70],"dearth":[73],"targeted":[75],"datasets.":[76],"In":[77],"response":[78],"these":[80],"challenges,":[81],"we":[82],"construct":[83],"three":[84],"datasets:":[85],"small":[86,126],"subsequently":[95],"proposing":[96],"an":[97],"innovative":[98],"triplet":[99,154],"network":[100,162],"model":[102,109,163],"shell.":[107],"excels":[110],"differentiating":[112],"from":[116],"files":[118],"while":[119],"simultaneously":[120],"aligning":[121],"them":[122,149],"more":[123],"closely":[124],"with":[125],"thereby":[129],"refining":[130],"classification":[131],"precision.":[132],"Our":[133],"methodology":[134,170],"transforms":[135],"samples":[136],"into":[137,150],"opcode":[138],"sequences":[139],"through":[140],"a":[141,158,175,181],"series":[142],"processing":[144],"steps,":[145],"then":[147],"integrates":[148],"specially":[152],"designed":[153],"network.":[155],"Benchmarked":[156],"against":[157],"cutting-edge":[159],"deep":[160],"learning":[161],"recognized":[165],"tools,":[167],"our":[168,192],"yields":[171],"superior":[172],"performance,":[173],"delivering":[174],"high":[176],"accuracy":[177],"92.56%":[179],"robust":[182],"F1-score":[183],"89.17%.":[185],"These":[186],"results":[187],"substantiate":[188],"potency":[190],"approach":[193],"countering":[195],"mounting":[197],"threat":[198],"posed":[199],"shells.":[203]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}