![]() |
|
|||||||
| Notices |
| Security Software This forum is for security related software. Ex. monitoring software, IDS/IPS software, logging software, server based firewalls, etc. |
![]() |
|
|
Thread Tools |
|
#1
|
|||
|
|||
|
How exactly does .defender or dot defender, however they call it, work?
|
|
#2
|
|||
|
|||
|
Quote:
The link to their site is: http://www.applicure.com/?page=dotDefender I believe it is a module that you compile into apache, and it has a database of over 800 rules, actually its 3 databases/data files, and one of those is signature based, the other 2 are patterned based. |
|
#3
|
|||
|
|||
|
Also check out http://gotroot.com for about 500 rules for mod_security.
|
|
#4
|
|||
|
|||
|
Quote:
![]() |
|
#5
|
|||
|
|||
|
dotDefender actually runs as 2 processes, I'm not exactly sure what they do though, I'm guessing it works at the connection level rather than at the web server level like mod_security does. Personally I use the mod_security rules from gotroot.com and I took out a couple that yielded some false positives.
![]() |
| Sponsored Links |
![]() |
| Bookmarks |
| Tags |
| call, defender, work |
| Thread Tools | |
|
|