DEVOPSITSEC Telegram 1582
πŸ›‘οΈ OpenRASP β€” ΠΈΠ½Π½ΠΎΠ²Π°Ρ†ΠΈΠΎΠ½Π½Ρ‹ΠΉ ΠΏΠΎΠ΄Ρ…ΠΎΠ΄ ΠΊ бСзопасности Π²Π΅Π±-ΠΏΡ€ΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΠΉ, ΠΊΠΎΡ‚ΠΎΡ€Ρ‹ΠΉ встраиваСт Π·Π°Ρ‰ΠΈΡ‚Ρƒ прямо Π² сСрвСр ΠΏΡ€ΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΠΉ. Π’ ΠΎΡ‚Π»ΠΈΡ‡ΠΈΠ΅ ΠΎΡ‚ Ρ‚Ρ€Π°Π΄ΠΈΡ†ΠΈΠΎΠ½Π½Ρ‹Ρ… WAF, Π°Π½Π°Π»ΠΈΠ·ΠΈΡ€ΡƒΡŽΡ‰ΠΈΡ… Ρ‚ΠΎΠ»ΡŒΠΊΠΎ входящиС запросы, OpenRASP ΠΌΠΎΠ½ΠΈΡ‚ΠΎΡ€ΠΈΡ‚ Π²Ρ‹ΠΏΠΎΠ»Π½Π΅Π½ΠΈΠ΅ уязвимых ΠΎΠΏΠ΅Ρ€Π°Ρ†ΠΈΠΉ Π½Π° ΡƒΡ€ΠΎΠ²Π½Π΅ прилоТСния, Ρ‡Ρ‚ΠΎ Ρ€Π΅Π·ΠΊΠΎ сниТаСт количСство Π»ΠΎΠΆΠ½Ρ‹Ρ… срабатываний.

ΠŸΡ€ΠΎΠ΅ΠΊΡ‚ ΠΏΠΎΠ΄Π΄Π΅Ρ€ΠΆΠΈΠ²Π°Π΅Ρ‚ популярныС Java-сСрвСры ΠΈ PHP 5.3-7.4, добавляя всСго 1-4% Π½Π°Π³Ρ€ΡƒΠ·ΠΊΠΈ. Алгоритмы дСтСктирования контСкстно-зависимы β€” Π°Ρ‚Π°ΠΊΠΈ Π²Ρ‹ΡΠ²Π»ΡΡŽΡ‚ΡΡ Ρ‚ΠΎΠ»ΡŒΠΊΠΎ ΠΏΡ€ΠΈ Ρ€Π΅Π°Π»ΡŒΠ½ΠΎΠΉ эксплуатации уязвимости, Π° Π΄Π΅Ρ‚Π°Π»ΡŒΠ½Ρ‹ΠΉ stacktrace ΡƒΠΏΡ€ΠΎΡ‰Π°Π΅Ρ‚ расслСдованиС ΠΈΠ½Ρ†ΠΈΠ΄Π΅Π½Ρ‚ΠΎΠ².

πŸ€– GitHub

@devopsitsec
πŸ‘6❀3πŸ”₯1



tgoop.com/DevOPSitsec/1582
Create:
Last Update:

πŸ›‘οΈ OpenRASP β€” ΠΈΠ½Π½ΠΎΠ²Π°Ρ†ΠΈΠΎΠ½Π½Ρ‹ΠΉ ΠΏΠΎΠ΄Ρ…ΠΎΠ΄ ΠΊ бСзопасности Π²Π΅Π±-ΠΏΡ€ΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΠΉ, ΠΊΠΎΡ‚ΠΎΡ€Ρ‹ΠΉ встраиваСт Π·Π°Ρ‰ΠΈΡ‚Ρƒ прямо Π² сСрвСр ΠΏΡ€ΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΠΉ. Π’ ΠΎΡ‚Π»ΠΈΡ‡ΠΈΠ΅ ΠΎΡ‚ Ρ‚Ρ€Π°Π΄ΠΈΡ†ΠΈΠΎΠ½Π½Ρ‹Ρ… WAF, Π°Π½Π°Π»ΠΈΠ·ΠΈΡ€ΡƒΡŽΡ‰ΠΈΡ… Ρ‚ΠΎΠ»ΡŒΠΊΠΎ входящиС запросы, OpenRASP ΠΌΠΎΠ½ΠΈΡ‚ΠΎΡ€ΠΈΡ‚ Π²Ρ‹ΠΏΠΎΠ»Π½Π΅Π½ΠΈΠ΅ уязвимых ΠΎΠΏΠ΅Ρ€Π°Ρ†ΠΈΠΉ Π½Π° ΡƒΡ€ΠΎΠ²Π½Π΅ прилоТСния, Ρ‡Ρ‚ΠΎ Ρ€Π΅Π·ΠΊΠΎ сниТаСт количСство Π»ΠΎΠΆΠ½Ρ‹Ρ… срабатываний.

ΠŸΡ€ΠΎΠ΅ΠΊΡ‚ ΠΏΠΎΠ΄Π΄Π΅Ρ€ΠΆΠΈΠ²Π°Π΅Ρ‚ популярныС Java-сСрвСры ΠΈ PHP 5.3-7.4, добавляя всСго 1-4% Π½Π°Π³Ρ€ΡƒΠ·ΠΊΠΈ. Алгоритмы дСтСктирования контСкстно-зависимы β€” Π°Ρ‚Π°ΠΊΠΈ Π²Ρ‹ΡΠ²Π»ΡΡŽΡ‚ΡΡ Ρ‚ΠΎΠ»ΡŒΠΊΠΎ ΠΏΡ€ΠΈ Ρ€Π΅Π°Π»ΡŒΠ½ΠΎΠΉ эксплуатации уязвимости, Π° Π΄Π΅Ρ‚Π°Π»ΡŒΠ½Ρ‹ΠΉ stacktrace ΡƒΠΏΡ€ΠΎΡ‰Π°Π΅Ρ‚ расслСдованиС ΠΈΠ½Ρ†ΠΈΠ΄Π΅Π½Ρ‚ΠΎΠ².

πŸ€– GitHub

@devopsitsec

BY DevOps




Share with your friend now:
tgoop.com/DevOPSitsec/1582

View MORE
Open in Telegram


Telegram News

Date: |

With Bitcoin down 30% in the past week, some crypto traders have taken to Telegram to β€œvoice” their feelings. While the character limit is 255, try to fit into 200 characters. This way, users will be able to take in your text fast and efficiently. Reveal the essence of your channel and provide contact information. For example, you can add a bot name, link to your pricing plans, etc. In the β€œBear Market Screaming Therapy Group” on Telegram, members are only allowed to post voice notes of themselves screaming. Anything else will result in an instant ban from the group, which currently has about 75 members. On Tuesday, some local media outlets included Sing Tao Daily cited sources as saying the Hong Kong government was considering restricting access to Telegram. Privacy Commissioner for Personal Data Ada Chung told to the Legislative Council on Monday that government officials, police and lawmakers remain the targets of β€œdoxxing” despite a privacy law amendment last year that criminalised the malicious disclosure of personal information. End-to-end encryption is an important feature in messaging, as it's the first step in protecting users from surveillance.
from us


Telegram DevOps
FROM American