SYSTEM FOR DETECTING WEBSHELL AND METHOD THEREOF

摘要

A system for detecting a webshell and a method thereof are provided to automatically determine whether a webshell signature is included in a script file to be tested. A webshell signature storing module(100) stores at least one webshell signature included in a webshell to divide the webshell from a normal script file. A tested file extracting module(200) extracts a script file stored in a computer terminal as a tested script file. A webshell signature comparing module(300) determines whether the webshell signature stored in the webshell signature storing module is included in the tested script file.