Thursday, November 5, 2009

For malware attacks, WAFs need to be complemented by WAM

Dmitry Evteev of Positive Technologies recently posted about a method to bypass web application firewalls (like mod-security) to mount SQL injection attacks.

While web application firewalls (or WAFs) play an important role in a defense-in-depth strategy, the post highlights why businesses cannot rely solely on preventative technologies like WAFs to secure their websites from attacks, particularly web-based malware attacks.

For one, as the article and the comments demonstrate, WAFs require configuration and ongoing maintenance of software and rulesets to prevent the latest attacks. If the WAF is running out-of-date software or rulesets, or if the administrator has improperly configured the device, it will not be able to prevent attacks like the one detailed in Dmitry's post.

Second, there will always be new types of attacks and new vulnerabilities that attackers can exploit to inject malicious code onto websites. WAFs can enforce security policies based on signatures of known attacks, but they cannot necessarily prevent "zero-day" attacks that look like normal traffic.

Finally, not all malware attacks exploit web application vulnerabilities to place malware on websites. For example, the Gumblar attack from earlier this year relied on compromised FTP credentials to infect sites. Recent malvertising attacks have taken advantage of syndicated ad networks to display malicious ads on legitimate publisher sites. A recent study by Google discovered that "the [malicious] code was often contained in those parts of the website not designed or controlled by the website owner, such as banner adverts and widgets... Widgets are small programs that may, for example, display a calendar on a webpage or a web traffic counter. These are often downloaded from third-party sites."

Security professional tend to invest heavily in "preventative" solutions, but underinvest in technologies to detect and remediate problems when they (inevitably) occur. WAFs can help "raise the bar," making it more difficult for attackers to infect a legitimate website. However, given that attackers can circumvent preventative technologies like WAFs, businesses cannot rely on WAFs alone to secure themselves from malware attacks. To provide true defense-in-depth, WAFs must be complemented by services like Dasient Web Anti-Malware (WAM) that automatically monitor websites for infections and remediate them when they occur.

41 comments:

  1. This site is very professional, and I feel really good, it is recommended that you go and see.

    uk dissertation online writing

    ReplyDelete
    Replies
    1. trăm nghìn hỏa nhân từ bên trong lao ra, những hỏa nhân này quỷ dị đáng sợ vô cùng.

      - Ao ao…

      Dưới những hỏa nhân này những người của viễn cổ Minh Xà tộc không có cách nào chỗng đỡ, bọn họ lần lượt bị nuốt chửng.

      Từng thanh âm thê thảm lại truyền ra, giống như là từ Cửu U địa ngục vậy.

      - Chết tiệt, dongtam
      mu private
      tim phong tro
      http://nhatroso.com/
      nhac san cuc manh
      tổng đài tư vấn luật
      http://dichvu.tuvanphapluattructuyen.com/
      văn phòng luật
      tổng đài tư vấn luật
      dịch vụ thành lập công ty
      http://we-cooking.com/
      chém gió
      trung tâm ngoại ngữmọi người mau tới đây tạo thành một vòng tròn phòng ngự.

      Thanh âm của Minh U vương vang lên ở bên trong Thiên Phần tiên trận, dù sao cũng là cường giả lục tinh Đấu Thánh, trước hết phải phục hồi tinh thần đã, trong mắt của hắn tràn ngập lãnh ý, một mảng đấu khí điên cuồng tràn ngập khiến cho không gian cũng bị chấn động.

      -A…

      Từng luồng thanh âm quỷ dị vang lên, một con quỷ đầu đã bị Minh U Vương đánh thành một mảng huyết vụ.

      Delete
  2. A very good post and an excellent blog. I am now a follower. Thanks, Steve
    Dissertations | MBA Dissertations

    ReplyDelete
  3. You will enjoy fifa 18 best staff autobuyer together with only some replica chanel. Almost all you should do is merely execute several activities just like: choosing the person you want a lot more, uncover the value this individual is true of the common, choose the value an individual identified before and also keep on highest taker and also record hour or so right after hour or so once you've previously earned. Here is the actions you should execute for almost each rare metal person previously mentioned fake chanel bags, yet also can perform whole lot regarding some other knowledgeable participants. The particular replica chanel bags 18 best staff automobile customer will be what you should take into account to get a far better knowledge within your FIFA video game. This is a actually helpful approach and also information that can help participants just about everywhere accross the earth. Should you be in fact knowledgeable about replica chanel Powerplant, you should understand just how effortless can easily employing this kind of 59th second become. An individual shouldn’t spend quite definitely moment any further, what you should carry out now's acquire analysis the particular video clip currently and also enjoy just how specifically you need to use this kind of specific chanel coco bags be a cheater powerplant. You ought to basically choose the particular fifa 18 autobuyer and also autobidder to your come across. Nowadays any FIFA autobuyer and also autobidder products several features just like: investing databases, video clip instruction, exclusive dealers location, depth simply by depth manuals, month to month coin special gifts, suggestions and also secrets to get a far better rolex day date watches knowledge. When you pick fifa 18 best staff hormone balance types you may also acquire far more as compared to in which, given that it will offer information in which other folks have got paid out a lot more regarding. Nowadays, making profits less difficult will be possible with all the FIFA 18 autobuyer, autobidder replica chanel coco. Don’t think twice, consider the details stated earlier to see just how chanel replica handbags 18 secrets may help your own private knowledge. One of many mobile phone industry's hottest brand names regarding scent will be Burberry. The business makes many scents and also colognes which can be a well liked between men and women just about everywhere. One merchandise could be the Sporting activities Cologne regarding guys. There are tons a lot more fake burberry outlet which can be created by Burberry. Annually, Burberry generates diverse lessons regarding scents; a number of the scents which they generate over a annually schedule are usually constrained updates. As a result, whether or not you might be female or male, you must selection of picking a scent in which finest matches your preferences, from your wide range.

    ReplyDelete
  4. Our factory is located in the replica handbags famous leather city, we have produced about six years this designer replica handbags, we have our own store, we in the handbags replica domestic market has won great reputation. We recognize the importance of honest and provide good service. Therefore, we guarantee defects, purchase any goods can be returned if there is any defect in the replica louis vuitton handbags plastic bag, or damaged during shipping, or any quality problems.

    ReplyDelete
  5. This blog impressed me and over exceeded my expectations. You know how to involve a reader and increase his curiosity to read more.best cologne for men from bestcologneformens.com

    ReplyDelete
  6. I have to say your article inspires me to the most, it is so instructive to tell others how to understand that in such a special view. I will share your articles with my friends, i think they will like them just like me. What's more, can you update them more frequently? I am a fan of online games.I am a game developer and i like to play games ? If you people love to play games you should visit once… http://www.archeagegold4u.com/

    ReplyDelete
  7. Very interesting blog. Alot of blogs I see these days don't really provide anything that I'm interested in, but I'm most definately interested in this one. Just thought that I would post and let you know.
    geometry dash| sniper games |happy wheels | happy wheels 2 |agario| five nights at freddy's unblocked games

    ReplyDelete
  8. The Jews Togel Online Singapore welcome Togel Online Hongkong this revolution in the Christian world, Bandar Togel Singapore and the Bandar Togel Jews Togel Online Terpercayashould show anexample. It is not an accident that Judaism gave birth to Marxism, and it is not an accident that the Jews readily took up Marxism: all this was in perfect accord with the progress of
    TheAgen Bandarq
    Communists Agen domino99
    are againstDomino Online
    religion (Christianity),Bandarq
    and Bandarq
    theyBandarq
    seek to Bandar domino destroy religion; yet, when we look deeper into the nature of Communism, we see that it is essential nothing else than a religion (Judaism)." (A Program for the Jews and Humanity, Harry Waton, p. 138).
    I shallAgen Bandarq use such influence asAgen Domino99 I have inDomino Online emphasizing the basic truths common Agen Poker to all denominations,Bandar Domino99 in Nonton Film Bioskop lowering denominational barriers and in promoting effective cooperation among Christians of whatever creed.The goal of Agen Bandarq
    Russia is in the Agen domino
    first instance aDomino Online
    World-Revolution. agen Bandarq
    The nucleus Bandar domino99 of opposition to such plans is to be found in the capitalist powers, England and France in the first instance, with America close behind them.
    In his novel Agen Bola Resmi Coningsby Bandar bola (London, 1844),Agen Bola Terpercaya Disraeli Agen Bola Terbesar drewAgen Bola online a picture Judi bola form Berita Bola the life Berita Bola of the JewsAgen Ibcbet ruling the world frombehind the thrones as graphic as anything in the Protocols of Nilus. Many believe, and it has been proved to most, Coningsby was a plagiarism of a Byzantine novel of the XVIIth century.

    ReplyDelete
  9. Super website with a great sharing and amazing stories is ur web.. please keep doing what u do now.. thanks to you.
    Agen Bola Resmi

    Bandar bola

    Agen Bola Terpercaya

    Agen Bola Terbesar

    Agen Bola online

    Judi bola

    Berita Bola

    Agen Sbobet

    Agen Ibcbet

    ReplyDelete
  10. Super website with a great sharing and amazing stories is ur web.. please keep doing what u do now.. thanks to you.
    Agen Bandarq

    Agen Domino99

    Domino Online

    Agen Poker

    Bandar Domino99

    berita politikberita politik terkini

    ReplyDelete
  11. You don't need us to tell you that every woman has insecurities, whether they're related to how she feels in red bottoms shoes a swimsuit or the way she looks in her clothes. What you do need is to see these curvy models reveal their own — and then strip christian louboutin shoes down for the camera anyway.Project WomanKind is a video series launched by five models, including Margaret Macpherson, Jessica Vander Leahy, Olivia Langdon, Sophie Sheppard, and Stefania Ferrario, louboutin Shoes with one inspiring goal: total body positivity and acceptance. While these brave ladies pose in their lingerie for a shoot, that's not our favorite part of the red bottom shoes for women six short films.Instead, we're more interested in listening to the models open up, sharing what they've learned about the industry, the worries that they've abandoned along the valentino boots way, and how they plan to diversify the face of fashion with every new campaign they front. Keep reading to watch a teaser for Project WomanKind, then giuseppe shoes get to know each of these five faces by reading their best token of advice and listening to their personal journeys.
    What would it look like if giuseppe zanotti sneakers average women replaced fashion models in major campaigns? We now have an answer. Nathalie Croquet is a former fashion photo editor who is taking a turn in louboutin shoes front of the camera for her series Spoof, which parodies high-fashion campaigns by famous French brands, including Givenchy and Isabel Marant. In partnership with photographer Daniel Schweizer, red bottoms shoes

    ReplyDelete
  12. Coach Outlet http://www.coachstoreoutlet.us.org

    Christian Louboutin Shoes http://www.christianlouboutinshoe.eu.com

    Valentino Shoes http://www.valentinoshoes.eu.com

    Michael Kors Outlet http://www.michaelkorsoutlet.us.org

    Coach Factory Outlet http://www.coachfactoryoutlet.us.org

    Coach Outlet Online http://www.coachoutletonlinestore.us.org

    Coach Purses http://www.coachpurse.us.com

    Kate Spade Outlet http://www.katespadefactoryoutlet.us.com

    Toms Shoes http://www.toms-shoes.name

    Hermes Belts http://www.hermesbelts.us.org

    Louis Vuitton http://www.louisvuitton-outletstores.us.com

    Fendi Handbags http://www.fendibelt.us.com

    Giuseppe Shoes http://www.giuseppezanotti.eu.com

    Michael Kors Outlet http://www.michael-kors-outlet.us.com

    Stephen Curry Shoes http://www.stephencurryshoes.us.com

    Salomon Shoes http://www.salomonshoes.eu.com

    North Face Outlet http://www.northfacesoutlet.in.net

    Coach Outlet http://www.outletcoach.in.net

    North Face Outlet http://www.northfacesoutlet.us.com

    Burberry Outlet http://www.burberryoutletstore.us.org

    North Face Outlet http://www.north-faceoutlets.in.net

    North Face Jackets http://www.outletnorthface.in.net

    Skechers Shoes http://www.skechersshoes.us.com

    Toms Outlethttp://www.tomsoutletstore.us.org

    North Face Outlet http://www.northfacestoreoutlet.us.org

    Nike Outlet http://www.nikeoutlet.us.org

    Nike Hoodies http://www.nikehoodies.us.com

    Marc Jacobs Handbags http://www.marcjacobshandbags.name

    Marc Jacobs Outlet http://www.marcjacobsoutletstore.us.com

    Jimmy Choo Shoes http://www.jimmy-chooshoes.us.com

    Jimmy Choos http://www.jimmychoos.in.net

    Burberry Belt http://www.burberrybelt.us.com

    Louis Vuitton Belt http://www.louisvuitton-belt.com

    Salvatore Ferragamo http://www.ferragamo-belt.us.com

    Marc Jacobs Handbags http://marcjacobshandbagsoutlet.blog.com

    Lululemon Outlet http://www.lululemonsoutlet.us.com

    True Religion Outlet http://www.truereligion-outlets.in.net

    Tommy Hilfiger http://www.tommyhilfigeroutlet.us.com

    Michael Kors Outlet http://www.outletmichaelkors.eu.com

    Coach Outlet http://www.outletcoach.eu.com

    Red Bottoms http://www.redbottom.in.net

    Kevin Durant Shoes http://www.kevindurantshoes.us.org

    New Balance Outlet http://www.newbalanceoutlet.in.net

    Adidas Outlet http://www.adidasoutlet.in.net

    Coach Outlet Online http://www.coachoutlet-online.eu.com

    Stephen Curry Jersey http://www.stephencurryjersey.us.com

    Vans Outlet http://www.vansoutlet.us.com

    Ralph Lauren Outlet http://www.ralphlauren-outletstore.in.net

    True Religion Outlet http://www.true-religionoutlets.in.net

    ED Hardy Outlet http://www.edhardyoutlet.in.net

    North Face Outlet http://www.northfaceoutlet.eu.com

    UGG Outlet http://www.uggoutlet.us.org

    UGG Outlet http://www.outletugg.in.net

    North Face Outlet http://www.northface--outlet.us.com

    Ugg Boots Sale http://www.uggbootssale.in.net

    UGGS For Women http://www.uggsforwomen.us.com

    Skechers Go Walk http://www.skechersgowalk.us.com

    Adidas Yeezy Boost http://www.adidasyeezyboost.in.net

    Adidas Yeezy http://www.adidasyeezy.us.com

    Adidas NMD http://www.adidas-nmd.us.org

    Coach Outlet http://www.coachoutletinc.us.com

    ReplyDelete
  13. Super website with a great sharing and amazing stories is ur web.. please keep doing what u do now.. thanks to you.
    Agen Bandarq
    Agen domino
    Domino Online
    agen Bandarq
    Bandar domino99 agen domino online

    ReplyDelete
  14. Our Buccaneers House Flag hangs vertically and provides a top sleeve for insertion of your flagpole. The Buccaneers House Flag measures 28x42 inches, is constructed of 2-ply polyester, and both sides are dye sublimated with the NFL team logo as shown.The house flag for Buccaneers has a liner sewn between its two polyester sides, therefore, this flag is viewable and readable correctly on both sides.Hang your Buccaneers House Flag with our banner pole or fly it with our 5' wood flagpole and adjustable flag bracket.


    house divided flags nhl
    nfl house flags
    nfl flags wholesaleTampa Bay Buccaneers house divided flags, House Divided Flags,Sports Flags 3x5, Sports flags and banners,nfl House Divided Flags

    ReplyDelete
  15. Dimensione: S, M, L, XL.
    Maglia Genoa 2016 2017 ←_← Clicca per visualizzare!!!
    Materiale di superficie: Tessuto 100% poliestere.
    Utilizzare la squadra: Genoa
    Utilizzando l’oggetto: uomo
    Comprare una maglie calcio Borussia Dortmund per
    Il negozio per maglie calcio a poco prezzo mercato più completo e affidabile, una serie di sconti speciali.
    Immediatamente produrre camicie, si prega di prestare attenzione al mio sito web. Maglia AS Roma 2017
    Maglia inter milan outlet
    Vendita Maglia Juventus outlet
    Maglia Lazio a poco prezzo 2017

    ReplyDelete