Best Practices: Web Application Firewalls

Purpose: Web applications of all kinds, whether online shops or partner portals, have in recent years increasingly become the target of hacker attacks. The attackers are using methods which are specifically aimed at exploiting potential weak spots in the web application software itself - and this is why they are not detected, or are not detected with sufficient accuracy, by traditional IT security systems such as network firewalls or IDS/IPS systems.

License: Creative Commons/International/Germany

Project Maintainer: Achim Hoffmann @

Project Contributor(s):

• Maximilian Dermann
• Mirko Dziadzka
• Boris Hemkemeier
• Achim Hoffmann
• Alexander Meisel
• Matthias Rohr
• Thomas Schreiber

3x slide Project Presentation: N/A

Mailing list: Subscribe or read the archives

Project Roadmap: To view, click here

Main links:

• Document (wiki) - Deutsch
• Document (wiki) - English
• Document (wiki) - Français
• Document (PDF) - Deutsch
• Document (PDF) - English

Project Health: Not Reviewed (Provisional)
To be reviewed under Assessment Criteria v2.0

• Contact OWASP Germany Local Chapter @ to contribute to this project,
• Contact OWASP Germany Local Chapter @

or the GPC to review or sponsor this project,

• Contact the GPC to report a problem or concern about this project or to update information.

Release Leader: Achim Hoffmann @

Release details: Main links, release roadmap and assessment

Rating: Not Reviewed
To be reviewed under Assessment Criteria v2.0

• First Release - 3/2008 - Deutsch Version (download)