Research Article

Webshell Detection Based on Executable Data Characteristics of PHP Code

Table 5

Confusion matrices of each group of experiments.

Model nameClassification algorithmActualPredicted
PositiveNegative

Model 1Random forestPositive
Negative
Support vector machinePositive
Negative
Multilayer perceptronPositive
Negative

Model 2Random forestPositive
Negative
Support vector machinePositive
Negative
Multilayer perceptronPositive
Negative

Model 3Random forestPositive
Negative
Support vector machinePositive
Negative
Multilayer perceptronPositive
Negative

The maximum value of the same algorithm in different models.