Live briefing
Everything about Web application firewall
HTTP specific network security system
A Web application firewall (WAF) is a specific form of application firewall that filters, monitors, and blocks HTTP traffic to and from a web service. By inspecting HTTP traffic, it can prevent attacks exploiting a Web application's known vulnerabilities, such as SQL injection, cross-site scripting (XSS), file inclusion, and improper system configuration. Financial institutions often utilize WAFs to help in the mitigation of Web application zero-day vulnerabilities, as well as hard-to-patch bugs or weaknesses through custom attack signature strings. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Web application firewallA 5-minute orientation
- Skim a recent paper: PROGESI: A PROxy Grammar to Enhance Web Application Firewall for SQL Injection PreventionInfluential work since 2022
- Pick up a classic book: Computer NetworksThe most-reprinted book on the subject
- Read the landmark paper: Deep Learning Technique-Enabled Web Application Firewall for the Detection of Web AttacksCited 97 times
- Go sideways: Security testingA closely related topic
- Go sideways: ModSecurityA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
Deep Learning Technique-Enabled Web Application Firewall for the Detection of Web Attacks
Leveraging deep neural networks for anomaly‐based web application firewall
Web Application Firewall Using Machine Learning and Features Engineering
Dynamic Web Application Firewall detection supported by Cyber Mimic Defense approach
DESIGN AND IMPLEMENTATION OF AN ARTIFICIAL INTELLIGENCE-BASED WEB APPLICATION FIREWALL MODEL
Toward an SDN-Based Web Application Firewall: Defending against SQL Injection Attacks
Artificial Intelligence Web Application Firewall for advanced detection of web injection attacks
Web Application Firewall Based on Anomaly Detection using Deep Learning
🆕 Influential since 2022
PROGESI: A PROxy Grammar to Enhance Web Application Firewall for SQL Injection Prevention
Web application firewall based on machine learning models
Optimizing Cloudflare security and performance with AI-based Web Application Firewall and anomaly detection
Web Application Firewall for Detecting and Mitigation of Based DDoS Attacks Using Machine Learning and Blockchain
Website Security System from Denial of Service attacks, SQL Injection, Cross Site Scripting using Web Application Firewall
📚 Books worth reading
Computer NetworksAndrew S. Tanenbaum, John David Wetherall · 1981
Computer networkingJames F. Kurose, Keith W. Ross · 1900
Invitation to Computer ScienceG. Michael Schneider, Judith L. Gersting · 1995
The web application hacker's handbookDafydd Stuttard, Marcus Pinto · 2007
Unix System Administration HandbookEvi Nemeth, Garth Snyder · 1989
Digital planetGeorge Beekman, Ben Beekman · 2011
Computational Thinking for the Modern Problem SolverKenny A. Hunt, David D. Riley · 2014
Professional mobile Web development with WordPress, Joomla!, and DrupalJames Pearce · 2011
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Security testing Security testing is a process intended to detect flaws in the security mechanisms of an information system and as such help enable it to protect data and…
- ModSecurity Free and open-source software portal ModSecurity, sometimes called Modsec, is an open-source web application firewall (WAF). Originally designed as a module…
- Application firewall An application firewall is a form of firewall that controls input/output or system calls of an application or service. It operates by monitoring and blocking…
- Application security Application security (AppSec) includes all tasks that introduce a secure software development life cycle to development teams. Its final goal is to improve…
- Proxy server In computer networking, a proxy server is an intermediary server application between a client requesting a resource and the server then providing that…
- Exploit (computer security) An exploit is a method or piece of code that takes advantage of vulnerabilities in software, applications, networks, operating systems, or hardware, typically…
- DMZ (computing) In computer security, a DMZ or demilitarized zone (sometimes referred to as a perimeter network or screened subnet) is a physical or logical subnetwork…
- Security engineering Security engineering is the process of incorporating security controls into an information system so that the controls become an integral part of the system's…