3 ms·
How does RhinoWAF compare to other open WAFs like OWASP Coraza WAF, bunkerweb, and SafeLine? Does RhinoWAF support ModSecurity SecLang rulesets like OWASP CRS?
by westurner 1y ago
How does RhinoWAF compare to other open WAFs like OWASP Coraza WAF, bunkerweb, and SafeLine?
Does RhinoWAF support ModSecurity SecLang rulesets like OWASP CRS? Is there a SecLang to RhinoWAF JSON converter?
Shouldn't eBPF be fast at sorting and running rules?
What are good metrics for evaluating WAFs?
coraza:
https://github.com/corazawaf/coraza https://github.com/corazawaf/coraza
bunkerweb: https://github.com/bunkerity/bunkerweb https://github.com/bunkerity/bunkerweb
SafeLine:
https://github.com/chaitin/SafeLine https://github.com/chaitin/SafeLine
RhinoWAF: https://github.com/1rhino2/RhinoWAF https://github.com/1rhino2/RhinoWAF
gh topic: waf: https://github.com/topics/waf https://github.com/topics/waf
awesome-WAF:
https://github.com/0xInfection/Awesome-WAF https://github.com/0xInfection/Awesome-WAF
- westurner 1y ago> What are good metrics for evaluating WAFs? TPR: True Positive Rate (Detection Rate), TNT: True Negative Rate, FPR: False Positive Rate ("ROC Curve") Accuracy = TP + TN / # Requests Latency / Detection Time as percentiles Throughput: response time in ms given requests per second Time to Virtual Patch, and CI/CD rule deployment integration DDoS Response Time: How quickly does the WAF mitigate a Layer 7 (application) DDoS attack? ... Rule Management Overhead: MTTT: Mean Time To Tune, Policy Complexity; CI/CD, SIEM/SOAR integration; https://gemini.google.com/share/0d2d1c53bfb0 https://gemini.google.com/share/0d2d1c53bfb0