These labels were automatically added by AI and may be inaccurate. For details, see About Literature Database.
Abstract
The frequent occurrence of cyber-attacks has made webshell attacks and
defense gradually become a research hotspot in the field of network security.
However, the lack of publicly available benchmark datasets and the
over-reliance on manually defined rules for webshell escape sample generation
have slowed down the progress of research related to webshell escape sample
generation and artificial intelligence (AI)-based webshell detection. To
address the drawbacks of weak webshell sample escape capabilities, the lack of
webshell datasets with complex malicious features, and to promote the
development of webshell detection, we propose the Hybrid Prompt algorithm for
webshell escape sample generation with the help of large language models. As a
prompt algorithm specifically developed for webshell sample generation, the
Hybrid Prompt algorithm not only combines various prompt ideas including Chain
of Thought, Tree of Thought, but also incorporates various components such as
webshell hierarchical module and few-shot example to facilitate the LLM in
learning and reasoning webshell escape strategies. Experimental results show
that the Hybrid Prompt algorithm can work with multiple LLMs with excellent
code reasoning ability to generate high-quality webshell samples with high
Escape Rate (88.61% with GPT-4 model on VirusTotal detection engine) and
(Survival Rate 54.98% with GPT-4 model).