WAF
Web Application Firewall
A WAF inspects HTTP/HTTPS traffic between users and web applications to block attacks like SQL injection, cross-site scripting, and request forgery. It applies rule sets that filter malicious requests before they reach the application server.
Cómo se usa en ciberseguridad
Security engineers configure WAF rules to protect public-facing web applications from OWASP Top 10 attacks. SOC analysts review WAF logs to detect application-layer attack campaigns and credential stuffing attempts. Penetration testers probe WAF configurations to identify bypass techniques and recommend rule improvements.
Término relacionado en el glosario: web application firewall
Las definiciones son explicaciones originales escritas con fines de desarrollo profesional. Para definiciones técnicas autorizadas, consulta NIST, ISO o el organismo de normalización correspondiente.