The most detect vulnerability scans

• By Y.K
• on 04/05/2021

We tested how many detected attacks when select waf rules.
We used vulnerability scanner to many rules, this rule detected the most attacks and few false positive.
This rule covers basic attacks on web applications such as SQL Injection and XSS and can block a wide range of attacks.
You can check which request was blocked by outputting the WAF log through Amazon Kinesis Data Firehose to see if there is a false positive and how much is blocked by which rule.
We could reductioned noise request for our application.