What is the difference between virtual patching and full patching of vulnerabilities?


Virtual patching tries to block the attack vectors, i.e. using some IDS, firewall or similar. But the vulnerability itself is still unfixed and if someone finds a new attack vector which bypasses current blocks the vulnerability can still be exploited.
Full patching instead fixes the vulnerability itself so it cannot be longer exploited by any attacker vector.

See also OWASP: Virtual Patching Best Practices.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.