OWASP Mod Security Core Rule Set CRS Project
Event Information
About this event
SPEAKER
Christian Folini
AGENDA
18:00 - webinar starts
19:30 - Close
SYNOPSIS
The CRS is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls. CRS is the 1st line of defense against web application attacks like those summarized in the OWASP Top Ten and all with a minimum of false alerts.
This talk demonstrates the installation of the rule set and introduces the most important groups of rules.
It covers key concepts like anomaly scoring and thresholds, paranoia levels, stricter siblings and the sampling mode. The important handling of false positives is also covered as well as pre-defined lists of rule exclusions for popular web applications helping to avoid false positives.
SPEAKER BIOGRAPHY
Christian Folini is a security engineer and open source enthusiast. He holds a Ph.D. in medieval history and enjoys defending castles across Europe.
Unfortunately, defending medieval castles is not a big business anymore and he turned to defending web servers, which he finds equally challenging.
He brings more than ten years of experience with ModSecurity configuration in high-security environments, DDoS defense, and threat modeling.
Christian Folini is the author of the second edition of the ModSecurity Handbook and the best-known teacher on the subject. He co-leads the OWASP ModSecurity Core Rule Set project and serves as the program chair of the "Swiss Cyber Storm" conference, the prime security conference in Switzerland.
THIS EVENT IS BROUGHT TO YOU BY:
BCS Cybercrime Forensics specialist group
https://www.bcs.org/membership/member-communities/cybercrime-forensics-specialist-group/
Our events are for adults aged 16 years and over.
For overseas delegates who wish to attend the event, please note that BCS does not issue invitation letters.
Organiser BCS, The Chartered Institute for IT
Organiser of OWASP Mod Security Core Rule Set CRS Project
We are all responsible for ensuring technology-led change is safe and positive for everyone in society. At BCS we’re committed to meeting this responsibility under royal charter.
That’s why we set the highest standards of professionalism and best practice in the industry, share knowledge, and develop skills and capability tuned to our evolving digital world.
We’ve been supporting the technology industry since 1957 and our 73,000-strong membership spans 150 countries. Every member actively promotes IT professionalism and we provide them with career development opportunities and bring the community together to address the professional, ethical and economic challenges facing technology today.
