What is a Web Application Firewall?

07 Jan, 2022
Web Application Firewall protects the web application by filtering, monitoring, and blocking any malicious HTTP/S traffic that might penetrate the web application. In simple words, a Web Application Firewall acts as a shield between a web application and the Internet. This shield protects the web application from different types of attacks.
According to the OSI model, WAF is a protocol layer seven defense.
When a WAF is deployed in front of a web application, a shield is created between the web application and the Internet.
The advantage of WAF is that it functions independently from the application, but yet it can constantly adapt to the application behavior changes.
The clients are passed through the WAF before reaching the server in order to protect the server from exposure.
WAF can be set to various levels of examinations, usually in a range from low to high, which allows the WAF to provide a better level of security.
Network-based WAFs are usually hardware-based. They provide latency reduction due to local installation. Network-based WAFs are the most expensive and also require the storage and maintenance of physical equipment.
Host-based WAFs may be completely integrated into an application’s software. They exist as modules for a web server. It is a cheaper solution compared to hardware-based WAFs, which are used for small web applications. The disadvantage of a host-based WAF is the consumption of local server resources because of which the performance may degrade.
Cloud-based WAFs are low-cost and have fewer resources to manage. The cloud-based solution is the perfect choice when a person doesn’t want to restrict themselves with performance capabilities. The service providers can provide with unlimited hardware pool but after a certain point of time, the service fees might increase.
There are several hackers out there who are ready to execute their malicious attacks. The most common attacks such as XSS, SQL Injection, etc. can be prevented with the help of WAF and that will be discussed further. The purpose of WAF is to protect your webpage from such malicious attacks. The WAF constantly monitors for potential attacks, blocking these attacks they are found to be malicious in any way.
The set of rules through which a WAF operates is called a policy.
The purpose of these policies is to protect against the vulnerabilities in the application by filtering out malicious traffic.
The value of a WAF comes in part depending upon the speed and efficiency with which the policy modification is implemented.
DDOS Attack aims to target a particular web application/ website/ server with fake traffic.
Cross-Site Scripting (XSS) Attacks are aimed at those users who use vulnerable web applications/ websites in order to gain access to and control their browsers.
SQL Injection Attacks: A malicious SQL code is injected in the form of requests or queries in the user input box on the web applications that the user is using.
Man-in-the-middle attacks take place when the perpetrators position themselves in between the application and the legitimate users in order to extract confidential details.
Zero-day attacks are unexpected attacks that take place. The organization knows about the existence of vulnerabilities in the hardware/ software only when the attack has taken place.
Blocklist: A WAF that is based on a blocklist protects against known attacks. Visualize blocklist WAF as a college security guard who is instructed to deny admittance to the students who don’t bring their ID-Cards.
Allowlist: A WAF based on an allow list only admits traffic that has been pre-approved. This is like the college security guard who only admits people who are on the list.
Both Blocklist and Allowlist have equal advantages and disadvantages because of which many WAFs offer a hybrid security model, which implements both.
Low-cost for cloud-based WAF solution.
Prevent attacks which include SQL injections, cross-site scripting (XSS) attacks, etc.
It prevents cookie poisoning. Cookie poisoning is the manipulation of cookies in order to keep track of users’ information.
Prevents data from being compromised.
If the software has vulnerabilities, then there are chances that some attacks might bypass them.
Sometimes the complete solution comes at an expensive cost.
A lot of resources are consumed.
There is a lack of cloud support because WAFs are majorly deployed as hardware on-premise.
Picked
Computer Networks
Computer Subject
Computer Networks
Writing code in comment?
Please use ide.geeksforgeeks.org,
generate link and share the link here.
Wireless Application Protocol
GSM in Wireless Communication
Secure Socket Layer (SSL)
Mobile Internet Protocol (or Mobile IP)
Advanced Encryption Standard (AES)
SDE SHEET - A Complete Guide for SDE Preparation
What is Algorithm | Introduction to Algorithms
Software Engineering | Coupling and Cohesion
Type Checking in Compiler Design
Difference between NP hard and NP complete problem