Zero False Positives in WAF – The Road to a Utopian Dream

Overview :

False positives have been the bane of most WAF solutions.

So much that application owners have been known to:

• Not apply new patches for zero-day threats or tinker with WAF configuration
• Or worse, put the WAF in log-only mode

However, WAAP/WAF is the first line of defense, and these practices give hackers red-carpet access to applications. In the webinar, Vivek Gopalan, VP of Product Management discusses the method.

Key takeaways:

• What are false positives?
• The impact of false positives
• Removing false positives in DAST scanners
• The road to ZERO false positives on WAF rules
• Leveraging positive security models for API security