Application Firewall will give birth to the next generation of Web Protection.

Original Title: Next Generation of Application Firewall

Web application firewall is the beginning.

To combat increasingly complex application attacks, the protection provided by WAF should be integrated into the application insurance platform. This architecture was proposed by f5. it integrates Web application firewall, data security, XML security net, and application traffic management to cover more comprehensive security.

Benefits include comparing information between these devices to determine whether traffic is malicious. This makes traffic control, analysis, and reporting more effective. Administrators can configure a set of policy rules and parameters, rather than executing different policies between several different devices, which greatly reduces the management burden.

In the future, the Web application firewall or its successor will need to interpret inbound data in the same way as the applications it protects. This requires some form of script engine to remove any problematic ones, so that the security device needs to view the request in the same way as the browser. In this way, it is very easy to evaluate whether the code is malicious. We hope we can see this form of dynamic analysis in the next generation of security devices.

1. Benefits of Web application firewall solutions
2. Barracuda Web application firewall White Paper
3. Application Layer attacks increase WAF's blind spot defense