Web App Log Analytics www.roykim.ca roy@roykim.ca Op Open Web - PowerPoint PPT Presentation

Feb 04, 2023 •269 likes •490 views

August 21, 2019 Web App Log Analytics www.roykim.ca roy@roykim.ca Op Open Web Applica cation tion Secu curity rity Project ject OWASP ModSecurity Core Rule Set (CRS) OWASP Top 10 Most Critical Web Application Security Risks

August 21, 2019 Web App Log Analytics
www.roykim.ca roy@roykim.ca
Op Open Web Applica cation tion Secu curity rity Project ject OWASP ModSecurity Core Rule Set (CRS)
OWASP Top 10 Most Critical Web Application Security Risks A1:2017-Injection A2:2017-Broken Authentication A3:2017-Sensitive Data Exposure A4:2017-XML External Entities (XXE) A5:2017-Broken Access Control A6:2017-Security Misconfiguration A7:2017-Cross-Site Scripting (XSS) A8:2017-Insecure Deserialization A9:2017-Using Components with Known Vulnerabilities A10:2017-Insufficient Logging&Monitoring
* https://www.zaproxy.org/ https://github.com/zaproxy/zap-hud
Case Management Analytics - Alerts Azure Sentinel
Azure Application Gateway An application delivery controller ▪ layer 7 load balancing/routing capabilities ▪ web application firewall. ▪
OWASP ModSecurity Core Rule Set
https://docs.microsoft.com/en-us/azure/azure-monitor/azure-monitor-rebrand#log-analytics-redefinition
Configuration • Penetration Test • Monitoring with Log Analytics • Alert • Security Center, Azure Sentinel • * see appendix slides for demo screenshots
roy@roykim.ca

Download Presentation

Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

Historical Perspective: T. M. Cover, Broadcast Channels, IEEE Trans. Inform. Theory, vol.

R EFLECTIONS ON THE G AUSSIAN B ROADCAST C HANNEL : P ROGRESS AND C HALLENGES Shlomo Shamai (Shitz) Department of Electrical Engineering TechnionIsrael Institute of Technology 2007 IEEE International Symposium on Information Theory June 26,

2k views • 166 slides

Fi Fix x the the leak: k: Side de-Cha Channe nnel Protect ction for SGX using Data

Fi Fix x the the leak: k: Side de-Cha Channe nnel Protect ction for SGX using Data Locatio Lo ion Ran andomiz izatio ion Alexandra Dmitrienko Julius-Maximilians-Universitt Wrzburg alexandra.dmitrienko@uni-wuerzburg.de MARCH 4,

402 views • 27 slides

Determinating Timing Channels in Compute Clouds Amittai Aviram, Sen Hu, Bryan Ford Yale

Determinating Timing Channels in Compute Clouds Amittai Aviram, Sen Hu, Bryan Ford Yale University http://dedis.cs.yale.edu/ Ramakrishna Gummadi University of Massechusetts Amherst CCSW, October 8, 2010 Timing Attacks Cooperative attacks

471 views • 30 slides

References 2 Material Related to LTE comes from 3GPP LTE: System Overview, Product

1 References 2 Material Related to LTE comes from 3GPP LTE: System Overview, Product Development and Test Challenges, Agilent Technologies Application Note , 2008. IEEE Communications Magazine, February 2009 IEEE Communications

345 views • 12 slides

Tunneling and Gateways Tunneling and Gateways Examples Gateways Motivation

Topics Topics Tunneling Motivation Terminology Tunneling and Gateways Tunneling and Gateways Examples Gateways Motivation Interoperability Srinidhi Varadarajan Remote provisioning of functionality Enhanced

360 views • 7 slides

Application Level Gateways Prof. Chuan-Ming Liu Computer Science and Information Engineering

Mobile Computing & Software Engineering Lab Mobile Computing & Software Engineering Lab Application Level Gateways Prof. Chuan-Ming Liu Computer Science and Information Engineering National Taipei University of Technology Taipei,

239 views • 19 slides

Spring 2010 CS419 Computer Security Vinod Ganapathy Lecture 14 Chapters 6 and 9 Intrusion

Spring 2010 CS419 Computer Security Vinod Ganapathy Lecture 14 Chapters 6 and 9 Intrusion Detection and Prevention Firewalls and IPSes effective means of protecting LANs internet connectivity essential for organization and

343 views • 23 slides

Proxy Server, Network Address Translator, Firewall 1 Proxy Server 2 1 Introduction What

Proxy Server, Network Address Translator, Firewall 1 Proxy Server 2 1 Introduction What is a proxy server? Acts on behalf of other clients, and presents requests from other clients to a server. Acts as a server while talking with

365 views • 32 slides

Firewalls, IDS and Social Network Presenter: Yinzhi Cao Lehigh University Acknowledgement

CSE343/443 Lehigh University Fall 2015 Firewalls, IDS and Social Network Presenter: Yinzhi Cao Lehigh University Acknowledgement http://www.cs.northwestern.edu/~ychen/ classes/mitp-458/firewalls.ppt http://web.cse.ohio-state.edu/~xuan/

1.29k views • 81 slides

Firewalls Packet Filtering Recapitulation: IPv4 Task of IP (Network layer in general):

IN3210 Network Security Firewalls Packet Filtering Recapitulation: IPv4 Task of IP (Network layer in general): Packet forwarding incl. routing Properties: Connection-less Adressing: source + destination IP address No

725 views • 47 slides

Software Thinking Ryan Perry Synology Collaboration Collaborate anywhere with innovative file

Software Thinking Ryan Perry Synology Collaboration Collaborate anywhere with innovative file server Surveillance Smart video analysis, capturing the crucial Software Intellect moments Smart Life Anywhere Networking Safeguard cyber safety

823 views • 59 slides

NDN Managed Gateways and The NDN Testbed John DeHart Computer Science & Engineering

NDN Managed Gateways and The NDN Testbed John DeHart Computer Science & Engineering Washington University www.arl.wustl.edu NDN Nodes Types of NDN Nodes Gatew ay Routers End User Application Nodes Gatew ay Router Nodes

552 views • 16 slides

A Simplified Access to Grid Resources for Virtual Research Communities Roberto BARBERA

Consorzio COMETA - Progetto PI2S2 UNIONE EUROPEA A Simplified Access to Grid Resources for Virtual Research Communities Roberto BARBERA (1-3) , Marco FARGETTA (3,*) and Riccardo ROTONDO (2) (1) Department

362 views • 20 slides

Firewalls Session 20 INST 346 Technologies, Infrastructure and Architecture Review

Firewalls Session 20 INST 346 Technologies, Infrastructure and Architecture Review Homework 4 Lab 4 2 Muddiest Points CDMA GSM is actually now CDMA (in 3G) Loss reasons other than buffer overflow 3 Goals for Today

303 views • 17 slides

Firewalls and intrusion detection systems Markus Peuhkuri 2005-03-22 Lecture topics Firewalls

Firewalls and intrusion detection systems Markus Peuhkuri 2005-03-22 Lecture topics Firewalls Security model with firewalls Intrusion detection systems Intrusion prevention systems

644 views • 7 slides

CloudEx:)A)Financial)Application)in)the)Cloud Balaji)Prabhakar CS)349F)Lec 6@II

CloudEx:)A)Financial)Application)in)the)Cloud Balaji)Prabhakar CS)349F)Lec 6@II Accurate(Timing(is(Foundational(for(the(Financial(Industry Exchanges)and) Trading)Platforms Ensure(fairness:(in;order(execution(of(transactions (

364 views • 11 slides

NetKernel: Making Network Stack Part of the Virtualized Infrastructure Zhixiong Niu , Hong Xu,

NetKernel: Making Network Stack Part of the Virtualized Infrastructure Zhixiong Niu , Hong Xu, Peng Cheng, Qiang Su, Yongqiang Xiong, Tao Wang, Dongsu Han, Keith Winstein Current architecture in the cloud VM VM APP APP Guest OS Guest OS

399 views • 25 slides

OSGi: Simplifying the IoT Gateway Walt Bowers Technical Solutions Architect - Eurotech Nov 5,

OSGi: Simplifying the IoT Gateway Walt Bowers Technical Solutions Architect - Eurotech Nov 5, 2015 Outline Where we are headed Eurotech Overview IoT Gateway Complexity Making IoT Gateways Simple Use Case Cold Chain

672 views • 29 slides

Chapter 9 Firewalls The Need For Firewalls Internet connectivity is essential however

Chapter 9 Firewalls The Need For Firewalls Internet connectivity is essential however it creates a threat Effective means of protecting LANs Inserted between the premises network and the Internet to establish a controlled

699 views • 34 slides

Recent work in OpenBSD relayd AsiaBSDCon 2013 Reyk

Recent work in OpenBSD relayd AsiaBSDCon 2013 Reyk Flter (reyk@openbsd.org) Agenda History & Background Recent work SSL Interception Socket

533 views • 19 slides

Building Web Gateways to Science in Python Shreyas Cholia NERSC/LBL SciPy 2010 Jun 30 th 2010

Building Web Gateways to Science in Python Shreyas Cholia NERSC/LBL SciPy 2010 Jun 30 th 2010 Austin TX NERSC National Energy Research Scientific Computing Center (NERSC) Supercomputing facility at Berkeley Lab in Berkeley/Oakland CA

590 views • 16 slides

Role of the Gateway in Delivering End to End IoT Solutions Anatoli Levine Spirent

Role of the Gateway in Delivering End to End IoT Solutions Anatoli Levine Spirent Communications Agenda Internet of Things at a Glance Power of IoT Implementing IoT - Needs and Challenges Role of IoT Gateways Spirent

309 views • 28 slides

Panel Discussion Industrial IoT Application Powered by Edgelink Cindy Huang, Product Manger,

Panel Discussion Industrial IoT Application Powered by Edgelink Cindy Huang, Product Manger, Advantech IIoT Group Topics Panelist Equipment Management from Software Jack Yang Visualization Perspective Software Product Manager Advantech

833 views • 22 slides

The Swiss-Army Knife for Python Web Developers Armin Ronacher http://lucumr.pocoo.org/ About

The Swiss-Army Knife for Python Web Developers Armin Ronacher http://lucumr.pocoo.org/ About Me About Me Name: Armin Ronacher Werkzeug, Jinja, Pygments, ubuntuusers.de Python since 2005 WSGI warrior since the very beginning

1.51k views • 126 slides