🦑𝐇𝐨𝐰 𝐃𝐨𝐞𝐬 𝐚 𝐖𝐀𝐅 𝐰𝐨𝐫𝐤?
A Web Application Firewall (WAF) functions by monitoring and filtering HTTP/HTTPS traffic to and from web applications.

𝐊𝐞𝐲 𝐨𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐚𝐥 𝐜𝐨𝐦𝐩𝐨𝐧𝐞𝐧𝐭𝐬 𝐢𝐧𝐜𝐥𝐮𝐝𝐞: -

𝐓𝐫𝐚𝐟𝐟𝐢𝐜 𝐀𝐧𝐚𝐥𝐲𝐬𝐢𝐬: It scrutinizes incoming and outgoing requests to pinpoint anomalies or potential threats.

𝐑𝐮𝐥𝐞 𝐄𝐧𝐟𝐨𝐫𝐜𝐞𝐦𝐞𝐧𝐭: Predefined rulesets are applied to identify and mitigate malicious activity. Analytical techniques employed by a WAF encompass:

𝐁𝐥𝐚𝐜𝐤𝐥𝐢𝐬𝐭𝐢𝐧𝐠: This approach blocks requests from known malicious IP addresses, preventing unauthorized access.

𝐖𝐡𝐢𝐭𝐞𝐥𝐢𝐬𝐭𝐢𝐧𝐠: Only explicitly approved requests are allowed through, enhancing security by default.

𝐒𝐢𝐠𝐧𝐚𝐭𝐮𝐫𝐞-𝐁𝐚𝐬𝐞𝐝 𝐃𝐞𝐭𝐞𝐜𝐭𝐢𝐨𝐧**This method involves recognizing established attack patterns based on known signatures.

**𝐁𝐞𝐡𝐚𝐯𝐢𝐨𝐫𝐚𝐥 𝐀𝐧𝐚𝐥𝐲𝐬𝐢𝐬: Leveraging machine learning algorithms, the WAF can identify suspicious behaviors that may deviate from normal activity. Unlike traditional antivirus solutions that rely solely on signature detection,
WAFs utilize more sophisticated detection mechanisms.

𝐎𝐧𝐜𝐞 𝐭𝐡𝐫𝐞𝐚𝐭𝐬 𝐚𝐫𝐞 𝐝𝐞𝐭𝐞𝐜𝐭𝐞𝐝, 𝐭𝐡𝐞 𝐖𝐀𝐅 𝐢𝐦𝐩𝐥𝐞𝐦𝐞𝐧𝐭𝐬 𝐭𝐡𝐞 𝐟𝐨𝐥𝐥𝐨𝐰𝐢𝐧𝐠 𝐦𝐞𝐚𝐬𝐮𝐫𝐞𝐬:

𝐑𝐞𝐪𝐮𝐞𝐬𝐭 𝐁𝐥𝐨𝐜𝐤𝐢𝐧𝐠: Directly halting any identified malicious requests.

𝐄𝐯𝐞𝐧𝐭 𝐋𝐨𝐠𝐠𝐢𝐧𝐠: Recording incidents for further investigation and analysis, facilitating continued improvement of security postures.

Image credit: Cyber Edition
Ref: Praveen Singh
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

📊 Leaky Labels: Bypassing Traefik Proxy Leveraging cAdvisor Metrics

https://undercodenews.com/leaky-labels-bypassing-traefik-proxy-leveraging-cadvisor-metrics/

@Undercode_News

⚠️ Cloud Misconfigurations: The New Face of Cybersecurity Risk

https://undercodenews.com/cloud-misconfigurations-the-new-face-of-cybersecurity-risk/

@Undercode_News

🌐 Chinese Spies Remain Embedded in US Telecom Networks

https://undercodenews.com/chinese-spies-remain-embedded-in-us-telecom-networks/

@Undercode_News

⚠️ Russian Spies Target #Android Users with New Mobile #Malware

https://undercodenews.com/russian-spies-target-android-users-with-new-mobile-malware/

@Undercode_News

📊 #Viber Goes Silent in Russia: Another Casualty in the Information War

https://undercodenews.com/viber-goes-silent-in-russia-another-casualty-in-the-information-war/

@Undercode_News

🔍 International Space Station Bustling with Research and a Spacewalk on the Horizon

https://undercodenews.com/international-space-station-bustling-with-research-and-a-spacewalk-on-the-horizon/

@Undercode_News

🎮 Streamlining #GitHub Issues: Enhanced Features and Improved Workflow

https://undercodenews.com/streamlining-github-issues-enhanced-features-and-improved-workflow/

@Undercode_News

🔴 #Adobe Framemaker Stack-based Buffer Overflow (#CVE-2024-53959) - Critical

https://dailycve.com/adobe-framemaker-stack-based-buffer-overflow-cve-2024-53959-critical/

@Daily_CVE

⚡️ A New #AI: #Microsoft Unveils Phi-4, a Small Language Model That Punches Above Its Weight

https://undercodenews.com/a-new-ai-microsoft-unveils-phi-4-a-small-language-model-that-punches-above-its-weight/

@Undercode_News

🔐 Latest Cyber Reports Show Iranian Hackers Target Lebanese and Israeli Telecoms with DDoS Attack

https://undercodenews.com/latest-cyber-reports-show-iranian-hackers-target-lebanese-and-israeli-telecoms-with-ddos-attack/

@Undercode_News

🦑𝐂𝐲𝐛𝐞𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐜𝐚𝐫𝐞𝐞𝐫𝐬 𝐏𝐚𝐭𝐡.

1) Security certification roadmap https://lnkd.in/ghvqfZ3z & https://lnkd.in/eFU8WC29

2) Domains of cyber security https://lnkd.in/eXsfxkTs

3) Cyber career map https://lnkd.in/evTUCgas

4) Cyber career map https://dsci.in

Suggestion on how to use these: ask yourself
👉 What domain of security interests you (offensive? Policy? Defence?),
👉 What job you want (pentester? CISO?),
👉 What certifications you might need (OSCP? CEH?)
👉 What level they are at, build up a plan of how to get there?
Thank you Katie Paxton-Fear for nice sharing.

Ref: G M Faruk Ahmed, CISSP, CISA

@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

⚡️ Unleash Your #Tesla's Inner Artist: New Vinyl Wrap Service with a Broader Palette!

https://undercodenews.com/unleash-your-teslas-inner-artist-new-vinyl-wrap-service-with-a-broader-palette/

@Undercode_News

⚡️ Navigating the New #iOS 18 Photos App: A User's Guide

https://undercodenews.com/navigating-the-new-ios-18-photos-app-a-users-guide/

@Undercode_News