DAS-WAF

Web Application Firewall provides protection against evolving cyber threats in these ways: Website Identification: Recognizing websites within web traffic. Protocol Parsing: Analyzing the protocols used by web applications. Deep Decoding: Inspecting the deeper layers of web traffic for anomalies. Simple Traffic Model Analysis: Evaluating basic traffic models to understand normal versus abnormal behavior. These steps activate the five integrated detection engines for multi-dimensional and in-depth inspection, enabling both proactive and reactive protection of web traffic.

Features

Website Auto-Discovery- Build A Secure And Credible Digital World DAS-WAF can automatically discover Web applications within your network environment and sort out Web application asset information, including protocol types (HTTP/HTTPS, IPv4/IPv6), server IP, server port, domain name and other information. This capability provides you with a rapid and comprehensive overview of your existing web-based business assets, enabling targeted protection strategies for each identified web application. Semantic Analysis- DAS-WAF utilizes an advanced semantic analysis engine that integrates lexical, syntactic analysis, and contextual correlation to accurately detect and block web attacks. It supports detection of 13 types of semantic syntax attacks, including SQL injection, XSS, PHP deserialization, and Java code injection. By using this approach, DAS-WAF drastically reduces false positives and negatives compared to traditional regular expression-based signatures, significantly easing the burden on security administrators for rule maintenance. Behavioral Analysis- DAS-WAF uses advanced behavior analysis to precisely detect and block application-layer DDoS attacks, brute force attempts, and other automated attacks. It applies proprietary behavioral detection algorithms, evaluating combinations of URL, request headers, target IPs, and request methods to ensure accurate and efficient threat detection and blocking. Threat Intelligence- DAS-WAF integrates threat intelligence to accurately cover a wide range of malicious IP data sources, including botnet IPs, scanner IPs, proxy IPs, brute force attackers, exploit attempts, and malicious crawlers. Upon detecting malicious IP access behavior, DAS-WAF can either alert administrators or block the access, ensuring robust protection against emerging and known threats.

BOT Protection- The DAS-WAF can detect and block access from malicious bots by identifying and verifying BOT types. This helps to prevent attacks such as crawling, scanning, and brute force attacks from malicious bots, effectively protecting web applications. Cookie Protection- The DAS-WAF supports the configuration of cookie protection strategies, such as signing or encrypting cookie values, to protect against illegal cookies. It uses the HttpOnly and Secure attributes to ensure that cookies are transmitted over secure, encrypted connections.