James Norman Cyb-310 5-3 Activity: Web Application Firewalls Southern New Hampshire University
I. Firewall Fundamentals A. Compare the different functions of a web application firewall and a basic firewall. A basic firewall primarily focuses on controlling traffic based on IP addresses, ports, and protocols. It acts as a barrier between internal and external networks, allowing or denying traffic based on predefined rules. On the other hand, a web application firewall (WAF) is specifically designed to protect web applications from various attacks, such as SQL injection, cross-site scripting (XSS), and other application-layer attacks. WAFs analyze the content of HTTP traffic and can make granular decisions based on the characteristics of the web application. B. Identify where a web application firewall and a basic firewall operate in the layers of the OSI model. - Basic Firewall: Operates primarily at the network layer (Layer 3) and transport layer (Layer 4) of the OSI model. It filters traffic based on IP addresses, ports, and protocols. - Web Application Firewall: Operates at the application layer (Layer 7) of the OSI model. It examines and filters traffic based on the content of HTTP requests and responses, targeting web application-specific vulnerabilities. C. Discuss the significance of the layers for responding to threats.
- Basic Firewall: Provides a foundational defense by controlling network traffic. It can prevent unauthorized access and protect against certain types of attacks, such as port scans and network- level attacks. - Web Application Firewall: Offers protection at a higher layer, focusing on the application-level vulnerabilities. It can detect and mitigate attacks that specifically target web applications, providing a more granular and context-aware security approach. II. Layered Security Strategy A. Describe the organizational security needs that would prompt the use of a web application firewall. Organizations might deploy a web application firewall when they have web applications exposed to the internet. The need arises due to the increasing sophistication of web-based attacks, including SQL injection, XSS, and other application-layer vulnerabilities. A WAF is crucial to protect sensitive data, maintain application availability, and ensure the integrity of web applications. B. Discuss how a web application firewall assists with the overall defense in depth strategy of an organization.