3 ms·
Web Application Security At the Edge is More Efficient Than In the Application
- ac 17y agoThe basic premise of the article is that a web application firewall can detect and deter all the attacks an internal mechanism can. Well, good luck with such an attitude!
- tptacek 17y ago... says vendor selling appliances that claim to make application security problems go away, a claim roundly derided among OWASP members.
- idlewords 17y agoThis article is just an extended ad for something called a 'web application firewall'.
- midnightmonster 17y agoIf the web app firewall is part of the network I control, I still have to pay all costs associated with "bad" communication with it. If it's not part of the network I control, then presumably I still have to pay something to use it, and moreover I can't trust it, so I have to duplicate all checks in my application anyway. (All this even if we grant the implausible claim that the web app firewall can reliably stop a useful set of attacks.) Where's the savings?