Webshell Detection Based on Executable Data Characteristics of PHP Code

Figure 5

Model 1 ROC curve.