Which types of attacks the sites are then protected from would depend on which ruleset is in use. ModSecurity (aka mod_security, security2_module, or modsec) is an apache module designed to work similarly to a Web Application Firewall, to help protect websites from certain types of attacks. Breaking it down a little further, mod_security is an Apache module (or extension) specifically designed to protect your website(s) from malicious activity.
That’s why the title of this section asks what ModSecurity can do, not what it does. I like to think about it as an enabler: there are no hard rules telling you what to do instead, it is up to you to choose your own path through the available features.
ModSecurity is a toolkit for real-time web application monitoring, logging, and access control. This article will cover the ‘mod_security’ module and whether or not you should consider using it on your server(s)/website(s). Keeping our websites secure is one of the most important and challenging topics of all time.
0 kommentar(er)
