Welcome to WebmasterWorld Guest from 54.147.0.174

Forum Moderators: Ocean10000 & incrediBILL

Message Too Old, No Replies

Ensnare web security tool

Ensnare Attack Detection Tool Hopes to Frustrate Hackers

     

dstiles

8:11 pm on Apr 10, 2014 (gmt 0)

WebmasterWorld Senior Member dstiles is a WebmasterWorld Top Contributor of All Time 5+ Year Member



This looks to be similar in concept to some of the home-grown tools we're using hereabouts to block web site attacks.

From a posting at Threat Post: [threatpost.com...]
"... engineers from Netflix this week released to open source a security tool that detects attacks against web applications—and also reacts to those attacks with responses they hope will flummox a hacker to the point that he moves on to his next target.

"The utility is called Ensnare and is available on Github. It is a Ruby on Rails gem plug-in and once added to a Web application, it will add steps to requests browsers make to a web application server that will quickly detect attacks, characterize them, and send responses back to the browser that range from error messages, to security alerts, to agonizing delays"

Looks potentially useful but sadly, since it's ruby, I don't suppose too many sites will benefit from it; at least not until it's ported to platforms such as PHP.

[edited by: incrediBILL at 4:28 am (utc) on Apr 11, 2014]
[edit reason] formatting and linking [/edit]

 

Featured Threads

Hot Threads This Week

Hot Threads This Month