Web application firewall: fast log and event console.

Sguil (pronounced sgweel) is built by network security analysts for network security analysts. Sguil's main component is an intuitive GUI that provides access to realtime events, session data, and raw packet captures. Sguil facilitates the practice of Network Security Monitoring and event driven analysis. The Sguil client is written in tcl/tk and can be run on any operating system that supports tcl/tk (including Linux, *BSD, Solaris, MacOS, and Win32).

Il est temps d’aller un peu plus en profondeur et se prémunir des attaques par DOS (Deny Of Service), des injections SQL, du flood de spam et bien plus encore. Deux modules d’Apache permettent de faire cela très rapidement: mod_security et mod_evasive

The OWASP CRS is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls. The CRS aims to protect web applications from a wide range of attacks, including the OWASP Top Ten, with a minimum of false alerts.