WEB APPLICATION FIREWALL(WAF)

 

                                         WEB APPLICATION FIREWALL(WAF)

• Web Application Firewall (WAF) is a critical defense security tool for filtering, blocking and monitoring incoming & outgoing data packets from a web application or website. A Web Application Firewall (WAF) is a device or service that protects web applications from attacks by filtering and monitoring HTTP traffic. By inspecting HTTP traffic, it can prevent attacks exploiting a web application's known vulnerabilities, such as SQL injection, cross-site scripting (XSS), file inclusion, and improper system configuration. By deploying a WAF in front of a web application, a protective shield is placed between the web application and the Internet. The Open Web Application Security Project (OWASP) provides a broad technical definition for a WAF as “a security solution on the web application level which - from a technical point of view - does not depend on the application itself.” Web application firewalls are a common security control used by enterprises to protect web systems against zero-day exploits, malware infections, impersonation, and other known and unknown threats and vulnerabilities. WAFs are especially useful for companies that provide products or services over the internet, such as e-commerce shopping, online banking and other interactions between customers or business partners.