GA»Æ½ð¼×WAF³É¹¦ÈëΧÖйúÒÆ¶¯¼¯²É

°ä²¼¹¦·ò 2022-07-27

ϲ±¨Æµ´«~GA»Æ½ð¼×WAF³É¹¦ÈëΧÖйúÒÆ¶¯2022ÄêÖÁ2024ÄêWebÀûÓ÷À»ðǽÉ豸¼¯²É½ð¶î³¬Ç§ÍòÔª£¡


2014ÄêÖÁ2022ÄêGA»Æ½ð¼×WAF²úÆ·ÂÅ´ÎÈëΧÖйúÒÆ¶¯¼¯²É


ƾ¾ÝÖйúÒÆ¶¯²É¹ºÓëÕбêÍøÏÔʾ £¬±¾´Î¼¯²É¹æÄ£´ïµ½1160̨ £¬Éæ¼°µäÅä1£¨ÀûÓòãÍÌÍÂÁ¿¡Ý10Gbps£©ºÍµäÅä2£¨ÀûÓòãÍÌÍÂÁ¿¡Ý10Gbps £¬¾ß±¸¹â¿ÚBypassÖ°ÄÜ£©Á½ÖÖÐͺÅ¡£Í¬Ê± £¬±¾´ÎÈëΧҲ±ê־ȡGA»Æ½ð¼×WAF²úÆ·Ôڸ߻úÄÜ¡¢Web°²È«Ó²ºËÄÜÁ¦µÈ·½ÃæµÃµ½Á˳ä·Ö×¢¶¨¡£


ÒµÎñ³¡¾°Óë¿¿µÃסÐÔ


ÖйúÒÆ¶¯ÒµÎñϵͳӵÓÐÒµÎñÁ÷Á¿´ó¡¢ÒµÎñ¸´ÔÓ»¯¡¢ÒµÎñ¸ß¿¿µÃסÐÔµÈÌØµã £¬GA»Æ½ð¼×WAF²úÆ·Âú×ãÖйúÒÆ¶¯³¡¾°»¯µÄÒªÇó¡£


Ö§³ÖͨÃ÷ÇÅ¡¢·´Ïò´úÀí¡¢µ¥±Ûģʽ¡¢ÅÔ·ģʽ¡¢Õ½Êõ·ÓÉ¡¢¼¯ÈºÄ£Ê½µÈ £¬¿ÉÂú×ãÖйúÒÆ¶¯¸÷ÀàÒµÎñ³¡¾°²¿Êð»·¾³µÄÒªÇó£»ÔÚIPV4¼°IPV6ÍøÂç»·¾³Ï²âÊԵĻúÄܾù²û·¢Óźñ £¬Âú×ãÖйúÒÆ¶¯Ë«Õ»Á÷Á¿Ï²¿Êð¡¢¹¥»÷¼ì²âÓë·À»¤ÒªÇó £¬Í¬Ê±Ò²Âú×ãÓû§ÏòIPV6ÍøÂ绬ÈóÉý¼¶ÒªÇó£»Ö§³Öµç¿Ú/¹â¿ÚÓ²BYPASS¡¢ÈíBYPASSµÈ £¬ÆëÈ«Âú×ãÖйúÒÆ¶¯WebÒµÎñϵͳµÄ¸ß¿¿µÃסÐÔÒªÇ󣻯ëÈ«Âú×㰲ȫÐÔÒªÇó £¬´ÓÓ²¼þ¼Ü¹¹¡¢ÏµÍ³ÖÎÀí¡¢ÀûÓÃÈí¼þµÈ×ÔÉí²»´æÔÚ·ÇÖÎÀí¶Ë¿ÚÊ¢¿ª¡¢¸ßΣ\ÖÐΣ·ì϶¡¢SQL×¢Èë¼°XSSµÈ°²È«Òþ»¼£»GA»Æ½ð¼×WAFÓ²¼þÒÀÕÕÂÌÉ«½ÚÄÜÒªÇó½øÐÐÉè¼Æ £¬ÆëÈ«Âú×㼯²ÉÖÐÂÌÉ«½ÚÄÜÒªÇó¡£


¼ì²âÓë·À»¤ÄÜÁ¦


GA»Æ½ð¼×WAF²úÆ·¿ÉÄܶÔSQL¡¢XSS¿çÕ¾¾ç±¾¡¢ºÅÁî×¢Èë¡¢WebShell¡¢É¨Ãè¹¥»÷·À»¤¡¢±äÖÖ¹¥»÷µÈ¶àÖÖËã·¨½øÐмì²âÓë·À»¤ £¬²¢±£ÕÏÕýÈ·ÂÊ¡£


  • Éî¿Ì¼¯³É»úе½ø½¨Ëã·¨ÒýÇæ £¬Í¨¹ý»úе½ø½¨¿ÉÉî¿Ì¼ì²âSQL×¢Èë¡¢XSS¿çÕ¾¾ç±¾µÈ¹¥»÷ £¬ÎÞÐè¸üÐÂÌØµã¿âÒ²¿É¼ì²â0day·ì϶¼°ÐÂÐ͹¥»÷£»

  • Éî¿ÌÈÚºÏÓïÒå·ÖÎöËã·¨ÒýÇæ £¬Í¨¹ýÓïÒå·ÖÎö¼ì²âËã·¨ £¬ÔÚÓï·¨¼ì²âµÄ»ù´¡ÉÏÔö³¤ÓïÒå·ÖÎö £¬ÓÃÓÚ·Ö±æÓк¦ºÍÎÞº¦µÄ¹¥»÷Á÷Á¿ £¬´ó·ù¶ÈÌáÉý¼ì²âÄÜÁ¦£»

  • Éî¿Ì½áºÏWebɨÃè¼ì²âËã·¨ÒýÇæ £¬Í¨¹ýÐÐΪ·ÖÎöËã·¨ £¬ÅжϳöWebɨÃèÆ÷µÄÐÐΪÊôÓÚÕý³£É¨Ãè»òÒ쳣ɨÃè £¬¶ÔÒì³£WebɨÃèÐÐΪ½øÐмì²âÓë×è¶Ï£»

  • È«ÃæÌáÉý±äÖÖ¹¥»÷¼ì²âÒýÇæ £¬¶Ô¶àÖÖ±äÖÖ¼°»ìºÏ±àÂë¹¥»÷¼ì²â £¬È磺URL½âÂë¡¢XML½âÂë¡¢JSON½âÎö¡¢XML½âÎö¡¢Base64½âÂë¡¢Unicode½âÂ롢ʮÁù½øÔìת»»¡¢Ð±¸Ü»Ø×ªÒå¡¢CHR½âÂë¡¢UTF-7½âÂë¡¢»ìºÏ±à½âÂëµÈ£»

  • Éî¿Ì½âÎöIPV4¡¢IPV6Ë«ºÍ̸ջ £¬ÆëÈ«Âú×ãIPV4¡¢IPV6˫ջ¹¥»÷¼ì²âÓë×è¶ÏÒªÇó £¬Í¬Ê±»¹Âú×ãWAF¹ú±ê¡°GBT 20281-2020¡±ÖÐIPV6ÒªÇó¡£


GA»Æ½ð¼×WAF²úÆ·Òѳɹ¦ÈëΧGartnerħÁ¦ÏóÏÞ £¬Í¬Ê±Æ¾¾ÝÈ«ÇòȨÍþ·ÖÎö»ú¹¹Frost& Sullivan WAFÊг¡Õ¼ÓÐÂÊÊý¾Ý £¬2018ÄêÖÁ2021Äê £¬GA»Æ½ð¼×Ó²¼þWAF³ÖÐøÕ¼¾Ý´óÖлªÇø¼°ÖйúÇøÊг¡Õ¼ÓÐÂʵÚÒ»¡£


×÷ΪÖйúÐÅÏ¢°²È«ÐÐÒµµÄÁì¾üÆóÒµ £¬GA»Æ½ð¼×¼¯ÍŽ«³ÖÐø±ü³Ð×ÔÖ÷´´ÐÂÐÄÁé £¬ÎªÌṩӵÓйú¼Ê¾ºÕùÁ¦¡¢×ÔÖ÷´´ÐÂWAF²úÆ·¶ø²»Ðݷܶ·¡£