WEB SHELL DETECTING APPARATUS AND METHOD USING SCRIPT OBFUSCATION PROCESS FUNCTION

摘要

The present invention provides a web shell detecting apparatus and a method using a script obfuscation processing function, capable of detecting a web shell pattern by obtaining an obfuscation execution code through analysis by the obfuscation processing of web source script data. For this, the present invention includes a web shell detection agent which is mounted on a web server, detects the web shell pattern through the obfuscation processing of the script by collecting the detection target files of the web server, and transmits the detection result to a web shell detection management server; and the web shell detection management server which stores and manages the detection result of the web shell pattern transmitted from the web shell detection agent. [Reference numerals] (100) Web server; (110) Web shell detection agent; (120) Detection target file collecting unit; (130) Obfuscation processing unit; (140) Web shell pattern detecting unit; (150) Message transceiver; (200) Web shell detection management server; (210) Message transceiver; (220) Detection result management unit