SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact UsToday's information cycles continue to evolve faster, with application vulnerabilities and discovery cycles continuing to increase in frequency, while IT resources and budgets do not scale accordingly with this trend. When considering how organizations approach patching their software applications, traditional patch management struggles to keep pace with identified vulnerabilities due to a variety of complexities that lie within the application, organizational culture and management itself. The sheer volume of new attack techniques to defend against in application software can be staggering, with new vulnerabilities publicly distributed each day and new sophisticated attack vectors published every week. By incorporating a Virtual Patching strategy, an organization can greatly improve efforts to reduce their organizational risk through quick remediation of vulnerabilities in web software. As the web interface has become the ubiquitous interface to software, this paper will provide an overview of virtual patching web applications with a focus on the open source project ModSecurity. Through the adoption of Virtual Patching as another tool in the information security arsenal, this article will illustrate how organizations can decrease the risk from software vulnerabilities and provide overall better defenses across their technology environments.