Firewalls - IAC - DTIC

Section 3 Firewall Products – application Firewalls
BugSec WebSniper
Abstract
WebSniper protects Web servers from exposure to
behavioral attack patterns such as SQL injections,
buffer overflow exploits, path traversals, cross-site
scripting, and many others, by implementing
signature-based attack identification and blocking.
WebSniper identifies and monitors requests sent via
the Internet, and distinguishes between legitimate
requests to be approved, and illegitimate requests to
be interpreted as attempted attacks and blocked
before they reach the Web server. WebSniper can also
be used for passive monitoring of traffic (without
blocking) if configured that way via the Information
Security Manager’s security policy and preferences.
WebSniper can also identify attacks that are
unknown in advance, and dictate their handling as
defined in the configuration. WebSniper also checks
and modifies responses returned from the Web server,
to protect clients and prevent data leaks. WebSniper
is implemented as an Internet Server Application
Programming Interface (ISAPI) file to communicate
efficiently with the Web server.
42 Firewalls IA Tools Report – Seventh Edition
BugSec WebSniper
Type of Firewall waF
oS Included
Format appliance
License Commercial
NIaP Validated
Common Criteria
developer BugSec (Israel)
Information http://www.bugsec.com/index.
php?q=WebSniper