• Journal of Information Processing Systems
• /
• v.11 no.2
• /
• pp.229-238
• /
• 2015

Web shells are programs that are written for a specific purpose in Web scripting languages, such as PHP, ASP, ASP.NET, JSP, PERL-CGI, etc. Web shells provide a means to communicate with the server's operating system via the interpreter of the web scripting languages. Hence, web shells can execute OS specific commands over HTTP. Usually, web attacks by malicious users are made by uploading one of these web shells to compromise the target web servers. Though there have been several approaches to detect such malicious web shells, no standard dataset has been built to compare various web shell detection techniques. In this paper, we present a collection of web shell files, WebSHArk 1.0, as a standard dataset for current and future studies in malicious web shell detection. To provide baseline results for future studies and for the improvement of current tools, we also present some benchmark results by scanning the WebSHArk dataset directory with three web shell scanning tools that are publicly available on the Internet. The WebSHArk 1.0 dataset is only available upon request via email to one of the authors, due to security and legal issues.

• Journal of Industrial Convergence
• /
• v.16 no.4
• /
• pp.47-52
• /
• 2018

WebShell is a web script file created by a hacker to remotely commands to a web server. The hacker can bypass the security system using the web shell, access the system, control the system such as file modification, copying and deletion, install malicious code in the web source code, attack the user's PC, And so on. There are many types of WebShell attack, but we study about attacks on PHP and JSP based web server which are used as representative ones. And we propose the method of web page management, method of development, and several other methods. By using these countermeasures, it is possible to effectively prevent damage caused by WebShell attacks.

• Journal of Korea Society of Digital Industry and Information Management
• /
• v.11 no.4
• /
• pp.81-87
• /
• 2015

Recently, with the development of the ICT environment, the use of the software is growing rapidly. And the number of the web server software used with a variety of users is also growing. However, There are also various damage cases increased due to a software security vulnerability as software usage is increasing. Especially web shell hacking which abuses software vulnerabilities accounts for a very high percentage. These web server environment damage can induce primary damage such like homepage modification for malware spreading and secondary damage such like privacy. Source code weaknesses checking system is needed during software development stage and operation stage in real-time to prevent software vulnerabilities. Also the system which can detect and determine web shell from checked code in real time is needed. Therefore, in this paper, we propose the system improving security for web server by detecting web shell attacks which are invisible to existing detection method such as Firewall, IDS/IPS, Web Firewall, Anti-Virus, etc. while satisfying existing secure coding guidelines from development stage to operation stage.

• Journal of Internet Computing and Services
• /
• v.23 no.4
• /
• pp.87-94
• /
• 2022

Recently, with the development of information and communication infrastructure, the number of Internet access devices is rapidly increasing. Smartphones, laptops, computers, and even IoT devices are receiving information and communication services through Internet access. Since most of the device operating environment consists of web (WEB), it is vulnerable to web cyber attacks using web shells. When the web shell is uploaded to the web server, it is confirmed that the attack frequency is high because the control of the web server can be easily performed. As the damage caused by the web shell occurs a lot, each company is responding to attacks with various security devices such as intrusion prevention systems, firewalls, and web firewalls. In this case, it is difficult to detect, and in order to prevent and cope with web shell attacks due to these characteristics, it is difficult to respond only with the existing system and security software. Therefore, it is an automated defense system through the collection and analysis of web shells based on artificial intelligence machine learning that can cope with new cyber attacks such as detecting unknown web shells in advance by using artificial intelligence machine learning and deep learning techniques in existing security software. We would like to propose about. The machine learning-based web shell defense system model proposed in this paper quickly collects, analyzes, and detects malicious web shells, one of the cyberattacks on the web environment. I think it will be very helpful in designing and building a security system.

• Journal of the Korea Convergence Society
• /
• v.6 no.4
• /
• pp.187-195
• /
• 2015

In the knowledge and information society which came into being with the advancements made in information and communication technology, there is an increasing perception of the importance of having knowledge and therefore being able to appropriately respond to the rapidly-changing society. Along with this, for the paradigm that stresses creativity and character, there must accompany advanced ways of conducting education which are capable of supporting changes in the educational objectives and contents. With respect to this, there is a need for sustained and long-term research into ways of utilizing SNS and ICT in the field of education. Accordingly, in this paper, a digital curation system was developed for educational contents that aim to develop one's creativity and character. Recently, web hacking is taking place actively. In this paper, a digital curation system that is secure against WebShell - one of the web hacking methods - is analyzed, as well as how to appropriately deal with this type of an attack.

• Coupled systems mechanics
• /
• v.9 no.1
• /
• pp.29-46
• /
• 2020

In this paper we deal with stability problems of any complex structure that can be modeled by beam and shell finite elements. We use for illustration the steel plate girders, which are used in bridge construction, and in industrial halls or building construction. Long spans, slender cross sections exposed to heavy loads, are all critical design points engineers must take into account. Knowing the critical load that will cause lateral torsional buckling of the girder, or load that can lead to web buckling, as an important scenario to consider in a design process.Many of such problem, including lateral torsional buckling with influence of lateral supports and their spacing on critical load can be solved by the proposed method. An illustrative study of web buckling also includes effects of position and spacing of transverse and longitudinal web stiffeners, where stiffeners can be modelled optionally using shell or frame elements.

• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• 2010.05a
• /
• pp.303-306
• /
• 2010

Personal information being leaked, and personal assets that through a malicious web site for hackers to exploit. Other confidential information via the web site of the country, and your personal information by illegally accessing the data has been obtained who Hacker forces are operating in some countries. Due to the problem of web site management has many vulnerabilities that web sites, as well as programs. In this paper, in the trend world, as well as domestic XSS, SQL Injection, Web Shell analysis of the vulnerability to attacks and XSS, SQL Injection, Web Shell is a direct attack to attack. Security measures are presented what after the attack demonstrated the hack to data collection, analysis. In this study, web site management, web site security and safety can be improved and research will contribute.

• Annual Conference of KIPS
• /
• 2000.10b
• /
• pp.1345-1348
• /
• 2000

Computers and communication technologies have been brought tremendous change to various aspects of an ever-fast changing world at present. Particularly, the use of internet and cyberspace is widespread in every comer of our life. We developed a cyber shell museum using an animation technology. It was developed for educational purposes, and accessible through the world wide web of internet. Cyber shell museum is consisted of five compartment including rare shells, marvelous shells, shell of the world, the shell of Korea and its story of shells. The database contains the pictures and related information of the shell and it implies not only animation display but also text information. The files of database were classified depending on the species, genus, family, order, and class and division of the shell. Picture of shells is displayed and user may reach the image and virtual view information by clicking through the object displayed. This provides multiple techniques to user may manipulate, visualize and interact with image on the web. And every such transformation as translation, rotation, and scaling can be applied in the picture interactively for the convenient and effective viewing.

• Journal of Korean Society of Steel Construction
• /
• v.23 no.4
• /
• pp.455-464
• /
• 2011

In this study, the buckling analysis of the vertically curved stiffened web plate was conducted through finite-element analysis, using an eight- and nine-node flat shell element with a substitute shear strain field. To investigate the buckling behavior of the vertically curved web plate with a longitudinal or vertical stiffener under in-plane moment loading, parametric studies were conducted for the variation of the width (b) and ratio of the bending stiffness of the stiffener to that of the plate (${\gamma}=EI/bD$). The static behavior of the vertically curved web plate without a stiffener was also investigated, and then the buckling abilities of the longitudinal and vertical stiffeners were compared under moment loading.

• Proceedings of the Korean Society of Computer Information Conference
• /
• 2024.01a
• /
• pp.49-50
• /
• 2024

본 논문에서는 웹쉘 악성코드를 정확하게 분류하고, 빠른시간안에 자동으로 웹쉘 분류 및 분석을 통하여 웹쉘을 탐지하기 위하여 인공지능 머신러닝 기반의 Supervised AI ML 및 Classification 알고리즘을 적용하여 빠른 시간안에 분류, 정확한 분석을 통하여 자동화된 탐지시스템인 MWSDS를 제안하고 웹쉘 실험 데이터를 통하여 실증하였다. 본제안의 경우 웹쉘악성코드 공격에 대한 대응뿐만아니라 관리적인 정보보호 체계수립을 통하여 보다 효과적이며, 지속적으로 대응할 수 있을 것으로 전망된다.