Linux Security Forum
 
 

Go Back   Linux Security Forum > Security Forums > Security Software

Notices

Security Software This forum is for security related software. Ex. monitoring software, IDS/IPS software, logging software, server based firewalls, etc.

Reply
 
Thread Tools
  #1  
Old 08-04-2008
LogWatcher LogWatcher is offline
Newbie
 
Join Date: Aug 2008
Posts: 8
Rep Power: 0
LogWatcher will become famous soon enoughLogWatcher will become famous soon enough
Default How exactly does .defender or dot defender, however they call it, work

How exactly does .defender or dot defender, however they call it, work?
Reply With Quote
  #2  
Old 08-04-2008
drendeah drendeah is offline
Super Moderator
 
Join Date: Jul 2008
Posts: 294
Blog Entries: 1
Rep Power: 101
drendeah has a reputation beyond reputedrendeah has a reputation beyond reputedrendeah has a reputation beyond reputedrendeah has a reputation beyond reputedrendeah has a reputation beyond reputedrendeah has a reputation beyond reputedrendeah has a reputation beyond reputedrendeah has a reputation beyond reputedrendeah has a reputation beyond reputedrendeah has a reputation beyond reputedrendeah has a reputation beyond repute
Default Re: How exactly does .defender or dot defender, however they call it, work

Quote:
Originally Posted by LogWatcher View Post
How exactly does .defender or dot defender, however they call it, work?
It's called dotDefender, all one word.

The link to their site is:
http://www.applicure.com/?page=dotDefender

I believe it is a module that you compile into apache, and it has a database of over 800 rules, actually its 3 databases/data files, and one of those is signature based, the other 2 are patterned based.
Reply With Quote
  #3  
Old 08-11-2008
Kantu Kantu is offline
Newbie
 
Join Date: Aug 2008
Posts: 7
Rep Power: 0
Kantu is on a distinguished road
Default Re: How exactly does .defender or dot defender, however they call it, work

Also check out http://gotroot.com for about 500 rules for mod_security.
Reply With Quote
  #4  
Old 08-14-2008
Beijing2008Linux Beijing2008Linux is offline
Banned
 
Join Date: Aug 2008
Posts: 10
Rep Power: 0
Beijing2008Linux is on a distinguished road
Default Re: How exactly does .defender or dot defender, however they call it, work

Quote:
Originally Posted by Kantu View Post
Also check out http://gotroot.com for about 500 rules for mod_security.
Nice link, I just installed those, it blocks my own whitehat hacking exploit attempts, so I know it works
Reply With Quote
  #5  
Old 08-18-2008
XenMaster XenMaster is offline
Newbie
 
Join Date: Aug 2008
Posts: 5
Rep Power: 0
XenMaster is on a distinguished road
Default Re: How exactly does .defender or dot defender, however they call it, work

dotDefender actually runs as 2 processes, I'm not exactly sure what they do though, I'm guessing it works at the connection level rather than at the web server level like mod_security does. Personally I use the mod_security rules from gotroot.com and I took out a couple that yielded some false positives.
Reply With Quote
Sponsored Links
Reply

Bookmarks

Tags
call, defender, work

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 01:26 PM.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Advertisement System V2.3 By   Branden