Projects/OWASP Best Practices: Use of Web Application Firewalls

PROJECT INFO What does this OWASP project offer you?

RELEASE(S) INFO What releases are available for this project?

what is this project? Name: OWASP Best Practices: Use of Web Application Firewalls (home page) Purpose: Web applications of all kinds, whether online shops or partner portals, have in recent years increasingly become the target of hacker attacks. The attackers are using methods which are specifically aimed at exploiting potential weak spots in the web application software itself - and this is why they are not detected, or are not detected with sufficient accuracy, by traditional IT security systems such as network firewalls or IDS/IPS systems. License: Creative Commons/International/Germany who is working on this project? Project Leader(s): OWASP Germany Local Chapter @ Project Contributor(s): Achim Hoffmann @ Maximilian Dermann Mirko Dziadzka Boris Hemkemeier Alexander Meisel Matthias Rohr @ Thomas Schreiber how can you learn more? Project Pamphlet: Not Yet Created Project Presentation: Mailing list: Mailing List Archives Project Roadmap: View Main links: Document (wiki) - Deutsch - VERSION 1.0.2 Document (wiki) - English - - VERSION 1.0.5 Document (PDF) - Deutsch - VERSION 1.0.2 Document (PDF) - English - VERSION 1.0.4 Key Contacts Contact OWASP Germany Local Chapter @ to contribute to this project Contact OWASP Germany Local Chapter @ to review or sponsor this project

current release Use of Web Application Firewalls - v1.0.5 - March, 2008 - (download) Release description: The document is aimed primarily at technical decision-makers, especially those responsible for operations and security as well as application owners (specialist department, technical application managers) evaluating the use of a WAF. Special attention has been paid - wherever possible - to the display of work estimates - including in comparison to possible alternatives such as modifications to the source code. Rating: Not Reviewed - Assessment Details last reviewed release Not Yet Reviewed other releases