NAXSI Open-Source WAF

This paper was written in 2012 as part of a research project at scip AG, Switzerland. It was initially published online at https://www.scip.ch/en/?labs.20121213 and is available in English and German. Providing our clients with innovative research for the information technology of the future is an essential part of our company culture.

WAF or Web Application Firewall is a fancy marketing name to describe technology that existed long before this term became common. In fact the technology behind WAF used to be called full application reverse-proxy and basically allows to forward, inspect and sanitize (or block) protocol requests to an application server.

Keywords

HTML, Risk, Windows, Framework, Block, PHP, Basel, False-Positive, Report, Browser, CSRF, Request, False Positive, OWASP, HTTP, Linux, Penetration Test, Firewall, Detect, XML, Talk, Market, Proxy, Source Code, APT

Impact byBIP!

	selected citations These citations are derived from selected sources. This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).	0
	popularity This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.	Average
	influence This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).	Average
	impulse This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.	Average