Fixed Rules
Bizfly Cloud’s rule management currently features a protection rule set aligned with the OWASP TOP 10.
These include the following Rules.
| Rule Name | Description | Action |
|---|---|---|
| SCANNER DETECTION | Rule set that detects security vulnerability scanning activities from popular commercial and open-source software | Block |
| PROTOCOL ENFORCEMENT | Rule set to validate HTTP requests to the server according to standards to limit application layer attacks | Block |
| PROTOCOL-ATTACK | Rule set to protect against attacks using HTTP REQUESTs such as HTTP Request Smuggling, HTTP Response Splitting, HTTP Header Injection, etc. | Block |
| APPLICATION-ATTACK-LFI | Rule set to protect against Local File Inclusion attacks | Block |
| APPLICATION-ATTACK-RFI | Rule set to protect against Remote File Inclusion attacks | Block |
| APPLICATION-ATTACK-RCE | Rule set to protect against Remote Code Execution attacks | Block |
| APPLICATION-ATTACK-PHP | Rule set to protect PHP application attacks | Block |
| APPLICATION-ATTACK-GENERIC | Rule set to protect against general attacks | Block |
| APPLICATION-ATTACK-XSS | Rule set to protect against XSS attacks | Block |
| APPLICATION-ATTACK-SQLI | Rule set to protect against SQL Injection vulnerabilities | Block |
| APPLICATION-ATTACK-SESSION-FIXATION | Rule set to protect against Session Fixation vulnerabilities | Block |
| APPLICATION-ATTACK-JAVA | Rule set to protect JAVA application attacks | Block |
| DATA-LEAKAGES | Rule set to protect against data leaks | Block |
| DATA-LEAKAGES-SQL | Rule set to protect against SQL data leaks | Block |
| DATA-LEAKAGES-JAVA | Rule set to protect against JAVA application data leaks | Block |
| DATA-LEAKAGES-PHP | Rule set to protect against PHP application data leaks | Block |
| DATA-LEAKAGES-IIS | Rule set to protect against IIS application data leaks | Block |
| WEB-SHELLS | Rule set to protect against web shell attacks | Block |