modsecurity

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

Google Chrome vulnerabilities starting to pile up

[ UPDATE: See below for Google's official response to these issues ] Security vulnerabilities in the new Google Chrome browser are beginning to pile up. Following our coverage of the carpet bombing combo threat and denial-of-service crashes, several readers have sent pointers to...

Tags: Google Inc., Vulnerability, Web Browser, Google Chrome, ModSecurity, Web Browsers, Security, Internet, Ryan Naraine

Blog posts 2008-09-05

Additional Resources

An Evaluation of the ModSecurity Pro M1100 Web Application Firewall Relative to the Payment Card Industry

This paper discusses the occurrence and causes of data compromises in the Payment Card Industry. Understanding the genesis of the application security requirements of the PCI DSS provides a firm foundation for determining the applicability and effectiveness of the WebDefend application layer firewall. In addition to discussing the impact of...

Tags: Payment, Industry, Application Security, PCI, Security Administration, Operational Accounting, Security, Storage, Hardware, Finance

White papers 2008-04-11

SPHINX: An Anomaly-Based Web Intrusion Detection System

This paper presents Sphinx, an anomaly-based web intrusion detection system. Sphinx analyzes the parameters sent to the web server, infers the "Type" of each parameter and combines different techniques to detect attacks, specifically designed to cope with each parameter type. Sphinx like the widely known ModSecurity is implemented as an...

Tags: Web Server, Parameter, Web, Anomaly, University Of Twente, SPHINX, Web Servers, Channel Management, Open Source, Internet, Marketing

White papers 2007-06-30

IT Commandment: Thou shalt not let thy web servers be hacked

Over the past few months I've become increasingly aware of the number of web sites being compromised and used for phishing and/or dropping malware. I expect the owners of the sites were unaware of what was going on. I've contacted ISPs and gotten a number of such sites shut...

Tags: Web server, server

Blog posts 2006-04-13

Web Application Firewalls.

Anyone who has worked as a security auditor, sometimes called a “white hat hacker� , knows that most organizations have gotten pretty good at configuring their firewalls and patching their externally facing servers. Doing a scan with tools such as nessus reveals very few exploitable vulnerabilities. But,...

Tags: web application firewall, Web application, firewall

Blog posts 2005-03-21