Thursday, November 5, 2009

For malware attacks, WAFs need to be complemented by WAM

Dmitry Evteev of Positive Technologies recently posted about a method to bypass web application firewalls (like mod-security) to mount SQL injection attacks.

While web application firewalls (or WAFs) play an important role in a defense-in-depth strategy, the post highlights why businesses cannot rely solely on preventative technologies like WAFs to secure their websites from attacks, particularly web-based malware attacks.

For one, as the article and the comments demonstrate, WAFs require configuration and ongoing maintenance of software and rulesets to prevent the latest attacks. If the WAF is running out-of-date software or rulesets, or if the administrator has improperly configured the device, it will not be able to prevent attacks like the one detailed in Dmitry's post.

Second, there will always be new types of attacks and new vulnerabilities that attackers can exploit to inject malicious code onto websites. WAFs can enforce security policies based on signatures of known attacks, but they cannot necessarily prevent "zero-day" attacks that look like normal traffic.

Finally, not all malware attacks exploit web application vulnerabilities to place malware on websites. For example, the Gumblar attack from earlier this year relied on compromised FTP credentials to infect sites. Recent malvertising attacks have taken advantage of syndicated ad networks to display malicious ads on legitimate publisher sites. A recent study by Google discovered that "the [malicious] code was often contained in those parts of the website not designed or controlled by the website owner, such as banner adverts and widgets... Widgets are small programs that may, for example, display a calendar on a webpage or a web traffic counter. These are often downloaded from third-party sites."

Security professional tend to invest heavily in "preventative" solutions, but underinvest in technologies to detect and remediate problems when they (inevitably) occur. WAFs can help "raise the bar," making it more difficult for attackers to infect a legitimate website. However, given that attackers can circumvent preventative technologies like WAFs, businesses cannot rely on WAFs alone to secure themselves from malware attacks. To provide true defense-in-depth, WAFs must be complemented by services like Dasient Web Anti-Malware (WAM) that automatically monitor websites for infections and remediate them when they occur.


  1. This site is very professional, and I feel really good, it is recommended that you go and see.

    uk dissertation online writing

    1. trăm nghìn hỏa nhân từ bên trong lao ra, những hỏa nhân này quỷ dị đáng sợ vô cùng.

      - Ao ao…

      Dưới những hỏa nhân này những người của viễn cổ Minh Xà tộc không có cách nào chỗng đỡ, bọn họ lần lượt bị nuốt chửng.

      Từng thanh âm thê thảm lại truyền ra, giống như là từ Cửu U địa ngục vậy.

      - Chết tiệt, dongtam
      mu private
      tim phong tro
      nhac san cuc manh
      tổng đài tư vấn luật
      văn phòng luật
      tổng đài tư vấn luật
      dịch vụ thành lập công ty
      chém gió
      trung tâm ngoại ngữmọi người mau tới đây tạo thành một vòng tròn phòng ngự.

      Thanh âm của Minh U vương vang lên ở bên trong Thiên Phần tiên trận, dù sao cũng là cường giả lục tinh Đấu Thánh, trước hết phải phục hồi tinh thần đã, trong mắt của hắn tràn ngập lãnh ý, một mảng đấu khí điên cuồng tràn ngập khiến cho không gian cũng bị chấn động.


      Từng luồng thanh âm quỷ dị vang lên, một con quỷ đầu đã bị Minh U Vương đánh thành một mảng huyết vụ.

  2. A very good post and an excellent blog. I am now a follower. Thanks, Steve
    Dissertations | MBA Dissertations

  3. You will enjoy fifa 18 best staff autobuyer together with only some replica chanel. Almost all you should do is merely execute several activities just like: choosing the person you want a lot more, uncover the value this individual is true of the common, choose the value an individual identified before and also keep on highest taker and also record hour or so right after hour or so once you've previously earned. Here is the actions you should execute for almost each rare metal person previously mentioned fake chanel bags, yet also can perform whole lot regarding some other knowledgeable participants. The particular replica chanel bags 18 best staff automobile customer will be what you should take into account to get a far better knowledge within your FIFA video game. This is a actually helpful approach and also information that can help participants just about everywhere accross the earth. Should you be in fact knowledgeable about replica chanel Powerplant, you should understand just how effortless can easily employing this kind of 59th second become. An individual shouldn’t spend quite definitely moment any further, what you should carry out now's acquire analysis the particular video clip currently and also enjoy just how specifically you need to use this kind of specific chanel coco bags be a cheater powerplant. You ought to basically choose the particular fifa 18 autobuyer and also autobidder to your come across. Nowadays any FIFA autobuyer and also autobidder products several features just like: investing databases, video clip instruction, exclusive dealers location, depth simply by depth manuals, month to month coin special gifts, suggestions and also secrets to get a far better rolex day date watches knowledge. When you pick fifa 18 best staff hormone balance types you may also acquire far more as compared to in which, given that it will offer information in which other folks have got paid out a lot more regarding. Nowadays, making profits less difficult will be possible with all the FIFA 18 autobuyer, autobidder replica chanel coco. Don’t think twice, consider the details stated earlier to see just how chanel replica handbags 18 secrets may help your own private knowledge. One of many mobile phone industry's hottest brand names regarding scent will be Burberry. The business makes many scents and also colognes which can be a well liked between men and women just about everywhere. One merchandise could be the Sporting activities Cologne regarding guys. There are tons a lot more fake burberry outlet which can be created by Burberry. Annually, Burberry generates diverse lessons regarding scents; a number of the scents which they generate over a annually schedule are usually constrained updates. As a result, whether or not you might be female or male, you must selection of picking a scent in which finest matches your preferences, from your wide range.

  4. Our factory is located in the replica handbags famous leather city, we have produced about six years this designer replica handbags, we have our own store, we in the handbags replica domestic market has won great reputation. We recognize the importance of honest and provide good service. Therefore, we guarantee defects, purchase any goods can be returned if there is any defect in the replica louis vuitton handbags plastic bag, or damaged during shipping, or any quality problems.

  5. This blog impressed me and over exceeded my expectations. You know how to involve a reader and increase his curiosity to read cologne for men from

  6. I have to say your article inspires me to the most, it is so instructive to tell others how to understand that in such a special view. I will share your articles with my friends, i think they will like them just like me. What's more, can you update them more frequently? I am a fan of online games.I am a game developer and i like to play games ? If you people love to play games you should visit once…

  7. Very interesting blog. Alot of blogs I see these days don't really provide anything that I'm interested in, but I'm most definately interested in this one. Just thought that I would post and let you know.
    geometry dash| sniper games |happy wheels | happy wheels 2 |agario| five nights at freddy's unblocked games

  8. The Jews Togel Online Singapore welcome Togel Online Hongkong this revolution in the Christian world, Bandar Togel Singapore and the Bandar Togel Jews Togel Online Terpercayashould show anexample. It is not an accident that Judaism gave birth to Marxism, and it is not an accident that the Jews readily took up Marxism: all this was in perfect accord with the progress of
    TheAgen Bandarq
    Communists Agen domino99
    are againstDomino Online
    religion (Christianity),Bandarq
    and Bandarq
    seek to Bandar domino destroy religion; yet, when we look deeper into the nature of Communism, we see that it is essential nothing else than a religion (Judaism)." (A Program for the Jews and Humanity, Harry Waton, p. 138).
    I shallAgen Bandarq use such influence asAgen Domino99 I have inDomino Online emphasizing the basic truths common Agen Poker to all denominations,Bandar Domino99 in Nonton Film Bioskop lowering denominational barriers and in promoting effective cooperation among Christians of whatever creed.The goal of Agen Bandarq
    Russia is in the Agen domino
    first instance aDomino Online
    World-Revolution. agen Bandarq
    The nucleus Bandar domino99 of opposition to such plans is to be found in the capitalist powers, England and France in the first instance, with America close behind them.
    In his novel Agen Bola Resmi Coningsby Bandar bola (London, 1844),Agen Bola Terpercaya Disraeli Agen Bola Terbesar drewAgen Bola online a picture Judi bola form Berita Bola the life Berita Bola of the JewsAgen Ibcbet ruling the world frombehind the thrones as graphic as anything in the Protocols of Nilus. Many believe, and it has been proved to most, Coningsby was a plagiarism of a Byzantine novel of the XVIIth century.

  9. Super website with a great sharing and amazing stories is ur web.. please keep doing what u do now.. thanks to you.
    Agen Bola Resmi

    Bandar bola

    Agen Bola Terpercaya

    Agen Bola Terbesar

    Agen Bola online

    Judi bola

    Berita Bola

    Agen Sbobet

    Agen Ibcbet

  10. Super website with a great sharing and amazing stories is ur web.. please keep doing what u do now.. thanks to you.
    Agen Bandarq

    Agen Domino99

    Domino Online

    Agen Poker

    Bandar Domino99

    berita politikberita politik terkini