Menu
Home
People
Places
Arts
History
Plants & Animals
Science
Life & Culture
Technology
Reference.org
Web application firewall
open-in-new
<p>A web application firewall (WAF) is a specific form of <a href="/facts/Application_firewall/JlesEYgP">application firewall</a> that filters, monitors, and blocks <a href="/facts/HTTP/TWtvf7JD">HTTP</a> <a href="/facts/Network_traffic/sdUtmrxM">traffic</a> to and from a <a href="/facts/Web_application/BLkF3BIN">web service</a>. By inspecting HTTP traffic, it can prevent attacks exploiting a web application's known vulnerabilities, such as <a href="/facts/SQL_injection/QD0cwbk5">SQL injection</a>, <a href="/facts/Cross-site_scripting/dhtusKKm">cross-site scripting</a> (XSS), <a href="/facts/File_inclusion_vulnerability/Fmtkq50p">file inclusion</a>, and improper system configuration. Most of the major financial institutions utilize WAFs to help in the mitigation of web application <a href="/facts/Zero-day_vulnerability/B1jJkD0C">"zero-day" vulnerabilities</a>, as well as hard-to-patch bugs or weaknesses through custom attack signature strings. </p>