3 ms·
It raises interesting questions about how companies like Incapsula will integrate with their customers in the future. Fairly easy for them to sit and monitor t
by justkez 13y ago
It raises interesting questions about how companies like Incapsula will integrate with their customers in the future.
Fairly easy for them to sit and monitor the low level networking kit dealing with Layer 3 + 4 attacks, but that's the wrong place to focus on Layer 7, right? They need to understand the web app and infrastructure it touches.
I'm sure they exist in some form or another, but it's likely we'll see more design patterns emerging to deal with mitigating application attacks. Combined with the network/protocol control you'd have application logic feeding down suspected attack data to block
- Igalze 13y agoYou raise an excellent point. We have a lot of application awareness configurations and our signature pool (which is one of the tools we use for traffic profiling) holds over 10M variant, sometime as much as ~20,000 per user-agent type, to cover all scenarios.