Bitninja Web Application Firewall Module Tutorial
The web is the most vulnerable interface on most servers. Having a powerful web application firewall is an essential part of the defense toolset if you host any web content. The biggest challange of a WAF is to find the balance between security level and false positive rate. You don’t want a weak web application firewall, but you can’t afford many false positives either
Generally speaking, web application firewalls monitor, filter, and block incoming and outgoing traffic on HTTP protocol. Through analysis, it’s a good protection shield against common web hacks, like injection flaws (eg. SQL injection), cross site scripting (XSS), session hijacking, remote and local file inclusions and other attacks.
BitNinja WAF 2.0 only scans incoming traffic currently, in real-time, with the built-in HTTP proxy solution. (For outbound traffic filtering there is a different module, the Outbound WAF.) Upon activation, BitNinja adds an iptables rule to your nat iptables table to redirect all traffic coming from port 80 to a port dedicated for BitNinja WAF 2.0. The WAF 2.0 process analyzes the incoming traffic and makes a connection to your local HTTP server to fetch the actual content.
More details: www.bitninja.io and learn.ituniversity.ro
Sur cette page du site, vous pouvez voir la vidéo en ligne Bitninja Web Application Firewall Module Tutorial durée heure minute seconde en bonne qualité , qui a été Téléchargé par l'utilisateur Gabriel A 11 avril 2019, Partagez le lien avec vos amis et connaissances, sur youtube cette vidéo a déjà été regardée 509 fois et il a aimé 1 téléspectateurs. Bon visionnage!
