ssdeep是用于創建和比較模糊哈希或[?上下文觸發的分段哈希](http://dfrws.org/2006/proceedings/12-Kornblum.pdf)的實用程序 通過簡單地將兩個散列相互比較，模糊散列使識別相似或幾乎相同的文本變得容易 [https://pecl.php.net/package/ssdeep](https://pecl.php.net/package/ssdeep) * [ssdeep\_fuzzy\_compare](https://www.php.net/manual/en/function.ssdeep-fuzzy-compare.php)—計算兩個模糊哈希簽名之間的匹配分數 * [ssdeep\_fuzzy\_hash\_filename](https://www.php.net/manual/en/function.ssdeep-fuzzy-hash-filename.php)( string $file_name ) : string—從文件創建模糊哈希 * [ssdeep\_fuzzy\_hash](https://www.php.net/manual/en/function.ssdeep-fuzzy-hash.php)( string $to_hash ) : string—從字符串創建模糊哈希 ## ModSecurity技巧：使用ssdeep檢測Webshell