From the course: Dynamic Application Security Testing
Join today to access over 24,700 courses taught by industry experts.
Web application firewalls - Burp Suite Tutorial
From the course: Dynamic Application Security Testing
Web application firewalls
- [Instructor] Web application firewalls are defensive technologies that are designed to detect and block potentially malicious application traffic. As an application security tester, you need to know how to identify, and in some cases, circumvent these web application firewalls. Keep in mind, a web application firewall is not the same thing as a network firewall. A network firewall is often a physical or virtual device that sits between a client system and a server network, filtering out network traffic that isn't allowed to pass between those two networks. This filtering is primarily done on network protocols, port numbers, or IP addresses. A web application firewall performs a similar filtering function, but it can see much, much deeper into the data. Web application firewalls inspect all HTTP and HTTPS traffic, looking for potentially malicious strings of text in URLs and in HTTP headers. By inspecting this web…
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.