Questions about this topic? Sign up to ask in the talk tab.
SQL injection/Countermeasures/Infrastructure
From NetSec
Revision as of 05:34, 19 July 2012 by LashawnSeccombe (Talk | contribs) (Created page with "<noinclude>:<font size="-2">SQL injection > Countermeasures > Infrastructure</font></noinclude> Web application firewalls usually operate a...")
- SQL injection > Countermeasures > Infrastructure
Web application firewalls usually operate at the same layer as the HTTP server or web applications, and thus monitor the protocol and input layers. This is different than normal IDS, which are stand-alone pieces of software or hardware that inspect the network and the host layer. Most intrusion detection mechanisms built for web applications operate using signature-based detection. Therefore, as long as an attack does not match a signature, it will slip by most of them.
