What does waf mean? The infiltration situation is as follows:

Waf means firewall.

Web application protection system (also known as website application-level intrusion prevention system. Web application firewall, abbreviated as WAF). In an internationally recognized word: Web application firewall is a product that provides special protection for Web applications by implementing a series of security policies for HTTP/HTTPS.

Create background

With more and more WEB applications, WEB server has gradually become the main target of attack because of its powerful computing power, processing performance and high value. Security incidents such as SQL injection, webpage tampering, webpage hanging, etc. occur frequently.

In 2007, CNCERT/CC detected that the total number of tampered websites in Chinese mainland reached 6 1228, which was 1.5 times higher than that in 2006. Among them, the Chinese mainland government website has been tampered with 4234 times a month.

Enterprises and other users usually use firewalls as the first line of defense for security systems. However, in reality, there are various security problems in Web servers and applications, and with the progress of hacker technology, prevention becomes more difficult, because these problems are difficult to be detected and stopped by ordinary firewalls, which leads to WAF(Web Application Protection System).

Web application firewall represents a new information security technology, which is used to solve the security problems of Web applications that traditional devices such as firewalls can't do. Unlike traditional firewalls, WAF works at the application layer, so it has inherent technical advantages in protecting Web applications.

WAF, based on a deep understanding of the business and logic of Web applications, detects and verifies all kinds of requests from Web application clients to ensure their security and legality, and intercepts illegal requests in real time, thus effectively protecting all kinds of websites.