Skip to content

Glossary: Network Security

web application firewall

Also written: WAF

A reverse proxy that understands HTTP and checks each request for web attacks such as SQL injection. Kettle & Crane's WAF is nginx with ModSecurity and the OWASP CRS.

Where the book teaches it

Related terms

reverse proxyModSecurityOWASP Core Rule SetSQL injection