Ruixu's next-generation WAF - WAAP platform, with three major engines working together, provides traditional WAF capabilities while easily dealing with Bots attacks, 0day attacks, application DDoS attacks and API security protection.

Gartner predicts that by 2023, more than 30 percent of public-facing web applications and APIs will be protected by cloud web application and API protection (WAAP) services that combine distributed denial of service (DDoS) protection, Bot mitigation, API protection, and Web Application Firewall (WAF).

Because of this, the next generation of WAF-WAAP platform came into being.

Six key points for customers to focus on when it comes to next-generation WAF

01 Whether it has high recognition ability for Bots attack

The number of automated attacks now exceeds human behavioral traffic.  According to Imperva statistics, 90% of security incidents worldwide are caused by malicious bots.  Due to the continuous upgrading of automated attack methods, on the one hand, automated attack tools continue to iterate, and on the other hand, automated attacks gradually anthropomorphize operations, anthropomorphize methods, and hide malicious features, making it more and more difficult for traditional WAFs to identify and protect automated Bots attacks.

Therefore, the next-generation WAF-WAAP platform should not only have the ability to identify automated Bots attacks by frequency and tool characteristics, but also use more discerning human-machine identification and defense technologies to identify various hidden tool characteristics and highly anthropomorphic attacks. To bypass the access behavior detected by WAF, enterprises should pay attention to the efficiency and depth of the next-generation WAF's identification of Bots traffic.

02 Whether there is a vulnerability protection capability that does not depend on patches

Despite the best efforts of developers and IT security teams, most applications are vulnerable. The data showed that more than 83 percent of the sites scanned had at least one vulnerability, and 20 percent were found to have a "critical" vulnerability, making it easy for hackers to exploit the vulnerability to access sensitive data or change website content. Worst of all, the average time to fix a vulnerability is 59 days, leaving applications exposed for too long. In addition to the cost and time to fix bugs, vulnerabilities in legacy applications may have remained untouched for years, and finding application vendors to obtain patches can be even more difficult.

Therefore, the next-generation WAF-WAAP platform must be able to identify known vulnerabilities and 0-day vulnerability detection and exploitation without relying on patches, and implement more proactive threat protection through dynamic technologies and intelligent threat analysis technologies.

03 Can you identify disguised and fraudulent traffic

Compared with traditional application-type vulnerabilities, logical vulnerabilities are difficult to find and protect. When attackers perform illegal operations, traditional WAF cannot identify such seemingly normal operations. When attackers take advantage of business logic vulnerabilities that are becoming more and more common, and initiate actions such as unauthorized operations, swiping orders, and simulated login operations, how does WAF distinguish whether this is done by attackers or normal user behavior?

Therefore, the next-generation WAF-WAAP platform should be able to distinguish malicious attacks, abnormal business traffic, and repeated attacks such as DDos through traffic learning and intelligent behavior analysis technology while possessing human-machine identification capabilities. Block network attacks without blocking legitimate traffic.

04 Can proactive defense be ahead of hackers?

With the escalation of offensive and defensive warfare, hackers are constantly creating new attack tools, honing existing technologies, recruiting gangs to commit crimes together, and constantly causing new threats to applications. Pass the feature checking function of traditional WAF.

Based on this, the next-generation WAF-WAAP platform should have the latest active defense technologies in order to defeat the escalating cyber threats and fight against hackers through emerging technologies such as dynamic security, machine learning and intelligent analysis models, and threat intelligence. When attackers scan and detect vulnerabilities, they can be detected and blocked in time, and fraudulent behaviors can be screened in time to realize business risk control.

05 Whether it can be deployed in multiple forms

In the digital age, enterprise IT takes a variety of forms, and applications may be deployed on-premises, in the cloud, or even in hybrid environments. Therefore, the next-generation WAF-WAAP platform should support a variety of rich deployment forms, including reverse proxy, transparent deployment, mirror deployment, and plug-in deployment, to meet the deployment needs of various user scenarios. At the same time, cluster multi-node deployment should be supported to meet the protection requirements of users' massive business traffic.

06 Can multi-application support

With more and more business access channels such as Web, APP, API, WeChat, and Mini Programs, the next-generation WAF-WAAP platform should also have the ability to support multiple applications, meet the needs of users in any Web scenario, and realize full-service channels protection. In addition, through full access records and multi-dimensional correlation analysis, the data of various business access channels should be integrated to achieve user access data tracking and perspective, and achieve unified management of Web security integration.

Today, digital applications have become an essential tool to drive rapid business growth. To fully protect these critical business resources, enterprises need a robust WAF product more than ever.

Based on this, Ruixi Information gives full play to the professional advantages of dynamic security technology and Bots automatic attack protection capability, and launches the next-generation WAF-WAAP platform, which is based on the three engines of "Dynamic Security Engine" + "Intelligent Threat Detection Engine" + "Rules Engine" Work together to help customers deal with emerging and rapidly changing Bots attacks, 0-day attacks, application DDoS attacks and API security protection while providing traditional web security defense capabilities. It breaks through the bottleneck that traditional WAF is difficult to deal with complex and hidden automated attacks, and directly points to the pain point of the current offensive and defensive battles. There is no doubt that the next-generation WAF-WAAP platform of Ruixu is a powerful tool for the integrated defense of web security today.