486 reputation
27
bio website incapsula.com
location
age 35
visits member for 2 years, 5 months
seen Dec 14 at 7:30

I`m techie, a security geek and a battle hardened SEO/SEM veteran. Today I'm a Product Evangelist at Incapsula, an Imperva subsidiary that provides cloud-based Security & Acceleration services.

Outside of work I`m a father, a son and a husband, an avid book reader and an award winning writer, a semi-pro MOBA player, dog lover and a professional couch potato.


Nov
12
comment How web application firewalls protect application from DDoS attacks?
@AnonymousPlatypus 750Gbps is how much inbound traffic we can process, not the amount we forward to firewall or to origin. For example, say we have a 100Gbps SYN flood + 100 RPS SQLis to the same site. Flood is filtered 1st and the rest is forwarded to WAF, where the SQLI requests are filtered out. That way WAF is never a SPOF.
Nov
10
comment How web application firewalls protect application from DDoS attacks?
Good answer. The exception to this rule is WAF/anti-DDoS integrated solutions. For example, a company I work for deploys WAF from a CDN network which can process +750Gig per second. This will help against volumetric attacks (amplification and floods) and also filter malicious request to applications.
Sep
24
awarded  Autobiographer
Jul
2
awarded  Yearling
May
1
comment How do crackers upload php scripts to Wordpress' wp-content directory?
Good answer (+1) Remote File Inclusion (RFI) attacks often enabled by themes. Themes with TimThumb related functionality are the most common suspect, still responsible for over 58% of all RFIs in 2013.
Nov
20
comment What can a zombie computer feasibly install and run?
No, but we should have the data to research this and publish a case-study. Thanks for the idea!
Nov
13
answered What can a zombie computer feasibly install and run?
Aug
21
revised Bot detecting by considering request inter-arrival time
deleted 9 characters in body
Jul
2
awarded  Yearling
May
12
revised How to verify the authenticity of Facebook users?
deleted 39 characters in body
Jan
15
answered Are image uploads also vulnerable to sql injection?
Jan
15
revised Bot detecting by considering request inter-arrival time
added 3 characters in body
Jan
14
answered Bot detecting by considering request inter-arrival time
Jan
3
answered How similar are bots regarding their HTTP GET request?
Dec
25
answered How to restrict web access to certain countries
Dec
10
awarded  Revival
Dec
4
revised IPTables DDoS protection working with per client IP address counter AND UDP
added 232 characters in body
Nov
8
comment Should we force user to HTTPS on website?
Also you are correct, Google uses https, ebay, amazon, whitehouse, fbi and cnn don't. Having said that, you made a good point (+1). Still for static pages or for sites that don't allow logins, I personally would use https. In some cases I guess you can "divide" your site and manage all loged request on diffrent httpsed [is this a word?] sub-domain. Still, good point. :)
Nov
8
awarded  Commentator
Nov
8
comment Should we force user to HTTPS on website?
If you feel that SSL will fool-proof you against session hijacking I can refer you to these sources (stackoverflow.com/questions/12233406/…) or ( stackoverflow.com/questions/10801916/…) And yes, it will help but then again this is just another barrier your can raise, not a solution. As to the speed issues, you don't have to be google to care about it. A hosting company with 10,000 clients can serve millions of sessions per day, if all are https that the slowdown will be noticeable for all.