Web Application Firewall -WAF

Web application firewall is the newer type of technology also known as WAF. It is very  different from normal firewalls. It applies rules to HTTP conversations.

Web application firewall is also used to check that the information a user is entering is correct or not. Like if you enter information in web forms it will check whether the entered name or information in any field is correct or not.

WAF- Importance

It is very important because if anyone puts some wrong information in the field and found a loophole he can get access to the database in which all the information is stored. One can also get the access to the web servers too.
This WAF protects us against database injection(SQL injection) and buffer overflow.

What is database injection?

SQL injection or database injection is mainly related to hacking. It is one of the techniques used to hack the websites.
As in SQL language data is stored in the database in the form of tables similarly in website database information of users, website and admin are also stored in the form of tables.
SQL injection is used to attack the database of the website. As the name suggest in SQL injection some query(like of javascript) is injected. This injected script doesn't affect the performance of the website but by using it one can know all information stored in the database.
Web application firewall is the one which protects the website and its database against such queries.

Where does Web Application Firewall is used?

It is mainly used in payment card industry and protects the credit card info of users from hackers.
So, WAF has a very important role on the internet.


Sometimes when you put the serial number or a zip code this web application firewall look that whether your entered code is genuine or not.