What is Web application firewall?
In short
A web application firewall filters traffic to and from a web application, blocking attacks such as injection and cross-site scripting that a network firewall wouldn't recognize.
Key takeaways
- It protects the application layer, while network firewalls control traffic by address and port.
- Its rules must be tuned to avoid blocking legitimate users.
- It complements, but doesn't replace, secure coding.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
To send a confidential message that only the intended recipient can read, which key should the sender use to encrypt it?