Research Article
Webshell Detection Based on Executable Data Characteristics of PHP Code
Table 5
Confusion matrices of each group of experiments.
| Model name | Classification algorithm | Actual | Predicted | Positive | Negative |
| Model 1 | Random forest | Positive | | | Negative | | | Support vector machine | Positive | | | Negative | | | Multilayer perceptron | Positive | | | Negative | | |
| Model 2 | Random forest | Positive | | | Negative | | | Support vector machine | Positive | | | Negative | | | Multilayer perceptron | Positive | | | Negative | | |
| Model 3 | Random forest | Positive | | | Negative | | | Support vector machine | Positive | | | Negative | | | Multilayer perceptron | Positive | | | Negative | | |
|
|
The maximum value of the same algorithm in different models. |