sPROXY

Security functions used by all DenyAll products

The challenge facing a web application firewall is to block attacks without interfering with legitimate traffic. DenyAll security modules have been developed with this in mind. These modules:

• Limit the risks entailed by onlining web applications
• Maximize the added value of web applications by ensuring long-term continuity of service

New incidents relating to web security problems are regularly documented. The most commonly-used methods are injections (especially SQL) and techniques known as cross-site scripting. While some of these attacks are well known and therefore easy to block using a backlist, attackers are constantly devising new methods. Capitalizing on the complexity of web applications, protocols and languages used to make business applications accessible via web browsers, hackers are constantly finding new vulnerabilities and developing new means of attack. It is the job of the scoring list to identify and block these attacks that are not yet listed.

A blacklist is a database of signature files corresponding to known attacks, which allows the WAF to identify and block malicious requests.
The principle of a scoring list is simple: to identify elements that may be dangerous within the requests received, assign them a relative weighting and block requests with a total score exceeding a certain level of hazardousness.

The DenyAll blacklist and scoring list:

• Provide protection against known and unknown attacks
• Facilitate compliance
• Enable access to sensitive data via the Internet (Webmail, collaborative work portal, business applications etc)

The scoring list used by DenyAll products is unique on the market. It offers the following competitive advantages:

• Immediate implementation without a learning phase
• A very high level of security
• A low rate of false positives
• No updating require

Attachments:

White paper- Proactive Security	[White paper- Proactive Security]
White paper - Scoring Model Efficiency Report	[White paper - Scoring Model Efficiency Report ]
Livre Blanc - Scoring Model Efficiency Report	[Livre Blanc - Scoring Model Efficiency Report ]
Livre Blanc - Sécurité Proactive	[Livre Blanc - Sécurité Proactive]