NEWS

Announcing General Availability of the NGINX Plus with ModSecurity WAF quote-para { color: #009639; font-size: 25px; line-height: 35px; font-family: Aktiv Grotesk W01; font-style: italic; margin:0; padding-top:50px; } “…even when you understand web security, it is difficult to produce secure code, especially when working under the pressure so common in today’s software development projects.” — Ivan Ristić, creator of ModSecurity More than ever before, organizations need all the help they can get with web application security. According to the Q4 2016 State of the Internet / Security Report from Akamai, there were 350 million attacks against web application attacks in that quarter alone. Successful attacks are disruptive to business, causing outages, loss of sensitive data, and system takeover by attackers. Successful attacks can also cascade, causing outages and disruptions to customers who depend on applications that have been attacked. NGINX Plus with ModSecurity [ more… ]

Building a Security Shield for Your Applications with NGINX & Wallarm td { padding-right: 10px; } This post is adapted from a presentation by Stepan Ilyan of Wallarm at nginx.conf in September 2016. You can view a recording of the presentation on YouTube. Table of Contents 0:00 Introduction   Who Am I? 0:34 Some Stats 1:38 Agenda 2:11 Why NGINX? 2:41 Attack Blocking with NGINX 3:05 Chapter 1 – Detect and Block 3:14 Tip #1 – Use ModSecurity WAF   Deployment is Easy   What The Rules Look Like   Core Rule Set (CRS)   More Rules, More Overhead   When ModSecurity Is A Pain   Best Practices   Use Request-Response   ModSecurity Handbook 9:27 Tip #2 – Use NAXSI   NAXSI Security Rules   Scoring-Based Protection   Example for SQLi   Whitelists   Pros and Cons   Kibana and Elasticsearch 12:57 Tip #3 – Try [ more… ]