What attacks do the Core Rules protect against?
In order to provide generic web applications protection, the Core Rules use the following techniques: • HTTP protection – detecting violations of the HTTP protocol and a locally defined usage policy. • Common Web Attacks Protection – detecting common web application security attack. • Automation detection – Detecting bots, crawlers, scanners and other surface malicious activity. • Trojan Protection – Detecting access to Trojans horses. • Errors Hiding – Disguising error messages sent by the server In addition the ruleset also hints at the power of ModSecurity beyond providing security by reporting access from the major search engines to your site.
