ModSecurity is a module running on Apache and based on a Linux server that will help users overcome the security threats prevalent in the online world. It is a web application firewall that can work either as an embedded or as a reverse proxy. It provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
ModSecurity 2.5 uses real-world examples of attacks to help users secure their web applications and server. The users will also learn about SQL injection, cross-site scripting attacks, cross-site request forgeries and null byte attacks to understand how attackers operate. Using clear step-by-step instructions, this book starts by teaching them how to install and set up ModSecurity and then dives into the rule language with examples.