owasp web application firewall

The authoritative security organization Owasp has just updated top 10:https://www.owasp.org/index.php/top_10_2013-top_10 ten security vulnerabilities: 1. injection, including SQL, operating system, and LDAP injection. 2. Problematic identification of session management. 3. Cross-site scripting attacks (XSS). 4. Unsafe direct object references. 5. Security Configuration error. 6. Exposing sensitive data. 7. Function-level access control is missing. 8.

Editor: "In nine to 12 months, it will be widely used ." This is a long time on the speed-first Internet. Currently, attackers do not need to have a deep understanding of network protocols by using attack software that is everywhere on the Internet, such as changing the Web site homepage and getting the administrator password, damage the entire website data and other attacks. The network layer data generated during these attacks is no different from t

Due to the particularity of the mobile communication industry, a large number of applications provide services based on web sites. Therefore, the mobile company has extremely high requirements on web security protection, not only must it implement the largest web security protection, it must also carry huge traffic access and legal and regulatory audit compliance

professional equipment, the other is towards the Web application integrated Gateway development. Barracuda Technical Director Optics the traditional firewall and Web application firewall, he believes that the traditional

Web-based applications require security value-added vendors and system integrators to install, configure, and support firewall devices for a series of web application firewall services. Firewall Products, because of its assistance

In the "Out of the Web application firewall misunderstanding" series of articles (i), we analyzed and discussed who can protect Web applications, in this article we will focus on the characteristics and application of WAF. As early as 2004, some foreign security vendors put

Customer background A Provincial Power Grid Company is a wholly owned subsidiary of China Southern Power Grid Co., Ltd. and one of the largest provincial power grid companies in China. The power grid company is engaged in power grid investment, operation and maintenance, power exchange and scheduling, Power Marketing, power equipment sales, commissioning, testing and testing as well as power design, construction, building, materials, scientific research economic entities for business such as tec

Web Application Firewall, also known as WEB Application Security Firewall (WAF), has become increasingly popular since the end of. In the past, these tools were monopolized by a few large projects. However, with the emergence of a

Four years ago, today, a website security protection software named "safe3 web application firewall" was launched. From then on, the domestic server security field began to enter a new era. Yesterday, security umbrella network technology company officially released the safe3 web ap