2

What is the difference between virtual patching and full patching of vulnerabilities?

Improve this question

1 Answer 1

Reset to default
3

Virtual patching tries to block the attack vectors, i.e. using some IDS, firewall or similar. But the vulnerability itself is still unfixed and if someone finds a new attack vector which bypasses current blocks the vulnerability can still be exploited.
Full patching instead fixes the vulnerability itself so it cannot be longer exploited by any attacker vector.

See also OWASP: Virtual Patching Best Practices.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .