15 ready-to-use tips on how to secure your applications with NGINXblog.wallarm.com5 points·by awkgeek·vor 11 Jahren·0 comments
HOWTO: Everything you need to protect from ShellShockblog.wallarm.com1 points·by awkgeek·vor 12 Jahren·0 comments
awkgeek·vor 11 Jahren·discussI like AWS direction towards security. But...Who needs WAF with basic, static rules in 2015 when applications are deployed several times a day? Mod_security in a cloud? Well. Be ready to get a dedicated person to support it to avoid false positives. And I guess it's still easy to by-pass.Give a try to Wallarm, NAXSI, Signal Sciences.
awkgeek·vor 11 Jahren·discussHere is how you can handle with it without rebooting the whole server:for s in $(lsof | grep libc | awk '{print $1}' | sort | uniq); do if [[ -f "/etc/init.d/$s" && "$(ps aufx | grep -v grep | grep $s)" ]]; then echo $s; service $s restart; fi; doneFrom: http://blog.wallarm.com/post/109402223343/ghost-a-brief-reca...
Who needs WAF with basic, static rules in 2015 when applications are deployed several times a day? Mod_security in a cloud? Well. Be ready to get a dedicated person to support it to avoid false positives. And I guess it's still easy to by-pass.
Give a try to Wallarm, NAXSI, Signal Sciences.