Web Application Firewall Shortcomings

One of the things that I do as EnableSecurity is Security Research. Recently I had the opportunity to present my Web Application Firewall research at a local ISACA meeting. The presentation included information about web application attacks, WAFs and attacks on Web Application Firewalls. Additionally, the audience was able to see a demonstration of an attack on one particular Web Application Firewall which was found vulnerable to a security bypass.

The presentation can be downloaded here.

Posted by Sandro Gauci