en en en en en en en en en en en hbs_lat en de en en it en en en en en en en en en en en en en en en en en en en en en en en en en fr en es en en en en en es en en en en de de en en az en en
This entry was posted in Security and tagged core-rules modsecurity on 24.02.2017 by Christian Folini
Damiano Esposito of ZHAW and I run a little test project where we want to measure the effectiveness of the OWASP ModSecurity Core Rule Set 3.0 (CRS3) under attack by several security scanners. The testing is only about to start, but I would like to document the setup of the ModSecurity server a bit to […]
Starting to build a set of rule exclusions or TYPO3
@avarx_ is part of the Swiss team for the European Cyber Security Challenges and also a member of the TYPO3 security team. I joined with him to start a set of TYPO3 rule exclusions for the OWASP ModSecurity Core Rule Set 3.0 (short CRS3). This is a set of rules to be deployed on a WAF in order to […]
Securing Drupal with ModSecurity and the Core Rule Set (CRS3)
This entry was posted in Security and tagged core-rules CRS CRS3 drupal modsecurity security on 22.11.2016 by Christian Folini
The new Core Rule Set 3.0 (CRS3) release simplifies ModSecurity/Drupal integration tremendously. Here is a guide aimed at the Drupal community to learn how to work with ModSecurity. This guide and the rule file it is based on currently covers Drupal Core. Modules / Plugins are not yet supported. But count on the Drupal community […]
Extending and Analyzing Apache Access Logs
This entry was posted in Security and tagged apache core-rules modsecurity on 14.10.2016 by Christian Folini
Today, we are releasing the next tutorial in our Apache / ModSecurity series: Extending and Analyzing the Access Log “What’s the big deal?” I hear you say. I admit, it may sound a bit boring, but log files are primordial. Configuring the right logfile makes the difference between ignorance and insight into you server. There […]
Introducing a Series of Apache/ModSecurity Tutorials
This entry was posted in Security and tagged apache core-rules modsecurity on 11.10.2016 by Christian Folini
The release of the OWASP ModSecurity Core Rule Set 3.0 is drawing closer and closer. This made me think about a way to introduce new users to ModSecurity and the Core Rules. Despite online documentation and blog posts and google and stack overflow and what not: There is no one stop place to learn it […]
Kubuntu to Arch Linux
ModSecurity / CRS Tutorials
Apache / NGINX Tutorials
ModSecurity CRS Rules Inventory
ModSecurity / CRS Newsletter
Phone +41 31 974 08 08
Ansible apache automation Cisco core-rules Core Rule Set CRS CRS3 DDoS Django drupal enigma enigma2017 firewall ModRewrite modsecurity NCS nervecenter netdisco nftables NMS OIN OpenSource OWASP Top10 PostgreSQL Proxmox Python 3 QoS Risks Sampling Mode security ssl SSL/TLS Swiss Cyber Experts Switzerland syslog tcpdump tls tshark typo3 ubuntu wireshark zenoss