What is Web Application Firewall security (WAFS)?
A Web Application Firewall (WAF) detects web traffic looking for suspicious activity; it can then automatically filter out illegitimate traffic based on rule sets that you ask it to apply. It looks at both GET and POST-based HTTP requests and applies a rule set. It can block comment spam, cross-site scripting attacks and SQL injections.
Web application firewalls are a common security control used by enterprises to protect Web applications against zero-day exploits, impersonation and known vulnerabilities and attackers. Through customized inspections, a WAF is also able to prevent cross-site scripting (XSS) attacks, SQL injection attacks, session hijacking and buffer overflows, which traditional network firewalls and other intrusion detection systems may not be capable of doing. WAFs are especially useful to companies that provide products or services over the Internet.
Different types of Firewall
Network-based WAFs are usually hardware-based and can reduce latency because they are installed locally, as close to the application as possible. Most major network-based WAF vendors allow replication of rules and settings across multiple appliances, thereby making large scale deployment and configuration possible. The biggest drawback for this type of WAF product is cost.
Host-based WAFs may be fully integrated into the application code itself. The benefits of application-based WAF implementation include low cost and increased customization options. Application-based WAFs can be a challenge to manage because they require local libraries and depend upon local server resources to run effectively.
Cloud-based WAFs offer a low-cost solution for organizations and easy to deploy, are availble on a subscription basis for the users and often require a simple DNS change to redirect application traffic and it would be quite challenging for ogranizations to filtering an web traffic with third-party provider, Cloud based WAF’s allow applications to be protected across a broad spectrum of hosting locations and use same plicies to protect against application layer attacks.
Web application Firewall security (WAFs) Protects against
- SQL injection, comment spam
- Cross-site scripting (XSS)
- Distributed denial of service (DDoS) attacks
- Application-specific attacks (WordPress, CoreCommerce) and many more.