15 ready-to-use tips on how to secure your applications with NGINXblog.wallarm.com5 ポイント·投稿者 awkgeek·11 年前·0 コメント
awkgeek·11 年前·議論I like AWS direction towards security. But...Who needs WAF with basic, static rules in 2015 when applications are deployed several times a day? Mod_security in a cloud? Well. Be ready to get a dedicated person to support it to avoid false positives. And I guess it's still easy to by-pass.Give a try to Wallarm, NAXSI, Signal Sciences.
awkgeek·11 年前·議論Here is how you can handle with it without rebooting the whole server:for s in $(lsof | grep libc | awk '{print $1}' | sort | uniq); do if [[ -f "/etc/init.d/$s" && "$(ps aufx | grep -v grep | grep $s)" ]]; then echo $s; service $s restart; fi; doneFrom: http://blog.wallarm.com/post/109402223343/ghost-a-brief-reca...
Who needs WAF with basic, static rules in 2015 when applications are deployed several times a day? Mod_security in a cloud? Well. Be ready to get a dedicated person to support it to avoid false positives. And I guess it's still easy to by-pass.
Give a try to Wallarm, NAXSI, Signal Sciences.