Webshell Detection Based on Executable Data Characteristics of PHP Code

Figure 7

Model 3 ROC curve.