WAFEC - content and history of an unbiased project challenge

No ratings

Presented at OWASPAppSecEU 2013 by

Ofer Shezaf

Achim Hoffmann

The Web Application Firewall Evaluation Criteria was initally released in 2006 by the Web Application Security Consortium (WASC). This talk will explain the history of WAFEC, starting at 1.0 to today. We will describe the problems and solutions bringing together communities, security enthusiasts and vendors to write an unbiased paper about an important security product. These efforts finally ended in building one joined project about it by the two security communities, WASC and OWASP. We will also describe the purpose of WAFEC 2.0, its goals, its audience, and how it can be used to evaluate the suitability of different WAFs.