Bitninja Web Application Firewall Module Tutorial
The web is the most vulnerable interface on most servers. Having a powerful web application firewall is an essential part of the defense toolset if you host any web content. The biggest challange of a WAF is to find the balance between security level and false positive rate. You don’t want a weak web application firewall, but you can’t afford many false positives either
Generally speaking, web application firewalls monitor, filter, and block incoming and outgoing traffic on HTTP protocol. Through analysis, it’s a good protection shield against common web hacks, like injection flaws (eg. SQL injection), cross site scripting (XSS), session hijacking, remote and local file inclusions and other attacks.
BitNinja WAF 2.0 only scans incoming traffic currently, in real-time, with the built-in HTTP proxy solution. (For outbound traffic filtering there is a different module, the Outbound WAF.) Upon activation, BitNinja adds an iptables rule to your nat iptables table to redirect all traffic coming from port 80 to a port dedicated for BitNinja WAF 2.0. The WAF 2.0 process analyzes the incoming traffic and makes a connection to your local HTTP server to fetch the actual content.
More details: www.bitninja.io and learn.ituniversity.ro
In questa pagina del sito puoi guardare il video online Bitninja Web Application Firewall Module Tutorial della durata di ore minuti seconda in buona qualità , che l'utente ha caricato Gabriel A 11 aprile 2019, condividi il link con amici e conoscenti, su youtube questo video è già stato visto 509 volte e gli è piaciuto 1 spettatori. Buona visione!
