{"id":52993,"date":"2019-11-21T00:00:00","date_gmt":"2019-11-20T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/funktsional-sovremennyh-sistem-zashhity-prilozhenij-waf-dolzhen-byt-gorazdo-shire-spiska-uyazvimostej-iz-owasp-top-10"},"modified":"2020-02-18T14:00:49","modified_gmt":"2020-02-18T11:00:49","slug":"funktsional-sovremennyh-sistem-zashhity-prilozhenij-waf-dolzhen-byt-gorazdo-shire-spiska-uyazvimostej-iz-owasp-top-10","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/funktsional-sovremennyh-sistem-zashhity-prilozhenij-waf-dolzhen-byt-gorazdo-shire-spiska-uyazvimostej-iz-owasp-top-10","title":{"rendered":"Funkcionalita modern\u00edch syst\u00e9m\u016f ochrany aplikac\u00ed (WAF) by m\u011bla b\u00fdt mnohem \u0161ir\u0161\u00ed ne\u017e seznam zranitelnost\u00ed v OWASP Top 10","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<h4>Retrospektiva<\/h4>\n<p>\nRozsah, slo\u017een\u00ed a struktura kybernetick\u00fdch hrozeb pro aplikace rychle evolvuj\u00ed. Po dlouh\u00e1 l\u00e9ta m\u011bli u\u017eivatel\u00e9 p\u0159\u00edstup k webov\u00fdm aplikac\u00edm p\u0159es internet pomoc\u00ed popul\u00e1rn\u00edch webov\u00fdch prohl\u00ed\u017ee\u010d\u016f. V ka\u017ed\u00e9m okam\u017eiku bylo nutn\u00e9 podporovat 2-5 webov\u00fdch prohl\u00ed\u017ee\u010d\u016f, a sada standard\u016f pro v\u00fdvoj a testov\u00e1n\u00ed webov\u00fdch aplikac\u00ed byla dostate\u010dn\u011b omezen\u00e1. Nap\u0159\u00edklad t\u00e9m\u011b\u0159 v\u0161echny datab\u00e1ze byly vybudov\u00e1ny pomoc\u00ed SQL. Bohu\u017eel, po kr\u00e1tk\u00e9m \u010dase se hacke\u0159i nau\u010dili pou\u017e\u00edvat webov\u00e9 aplikace k kr\u00e1de\u017ei, odstra\u0148ov\u00e1n\u00ed nebo zm\u011bn\u011b dat. Z\u00edsk\u00e1vali nez\u00e1konn\u00fd p\u0159\u00edstup a zneu\u017e\u00edvali mo\u017enosti aplikac\u00ed pomoc\u00ed r\u016fzn\u00fdch technik, v\u010detn\u011b podvodu u\u017eivatel\u016f aplikac\u00ed, vkl\u00e1d\u00e1n\u00ed a vzd\u00e1len\u00e9ho spu\u0161t\u011bn\u00ed k\u00f3du. Brzy se na trhu objevily komer\u010dn\u00ed prost\u0159edky ochrany webov\u00fdch aplikac\u00ed, nazvan\u00e9 Web Application Firewalls (WAF), a spole\u010dnost reagovala vytvo\u0159en\u00edm otev\u0159en\u00e9ho projektu pro zaji\u0161t\u011bn\u00ed bezpe\u010dnosti webov\u00fdch aplikac\u00ed, Open Web Application Security Project (OWASP), s c\u00edlem definovat a udr\u017eovat standardy a metodiky pro v\u00fdvoj bezpe\u010dn\u00fdch aplikac\u00ed.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h4>Z\u00e1kladn\u00ed ochrana aplikac\u00ed<\/h4>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/radware.pro\/downloads\/OWASP_Top_10-2017-ru.pdf\">Seznam OWASP Top 10<\/a><\/noindex> je v\u00fdchoz\u00edm bodem pro ochranu aplikac\u00ed a obsahuje seznam nejnebezpe\u010dn\u011bj\u0161\u00edch hrozeb a \u0161patn\u00fdch konfigurac\u00ed, kter\u00e9 mohou v\u00e9st k zranitelnostem aplikac\u00ed, jako\u017e i taktiky pro detekci a odra\u017een\u00ed \u00fatok\u016f. OWASP Top 10 je uzn\u00e1van\u00fdm m\u011b\u0159\u00edtkem v pr\u016fmyslu kybernetick\u00e9 bezpe\u010dnosti aplikac\u00ed po cel\u00e9m sv\u011bt\u011b a ur\u010duje z\u00e1kladn\u00ed seznam funkc\u00ed, kter\u00e9 by m\u011bl syst\u00e9m ochrany webov\u00fdch aplikac\u00ed (WAF) m\u00edt. <\/p>\n<p>Krom\u011b toho by funkcionalita WAF m\u011bla zohled\u0148ovat dal\u0161\u00ed b\u011b\u017en\u00e9 \u00fatoky na webov\u00e9 aplikace, v\u010detn\u011b podvr\u017een\u00ed meziwebov\u00fdch po\u017eadavk\u016f (CSRF), klikac\u00edch podvod\u016f (Clickjacking), web scraping a zahrnut\u00ed soubor\u016f (RFI\/LFI).<\/p>\n<h4>Hrozby a \u00fakoly zaji\u0161t\u011bn\u00ed bezpe\u010dnosti modern\u00edch aplikac\u00ed<\/h4>\n<p>\nV sou\u010dasn\u00e9 dob\u011b nejsou v\u0161echny aplikace pln\u011b online. Existuj\u00ed cloudov\u00e9 aplikace, mobiln\u00ed aplikace, API a v nejnov\u011bj\u0161\u00edch architektur\u00e1ch dokonce individu\u00e1ln\u00ed softwarov\u00e9 funkce. V\u0161echny tyto typy aplikac\u00ed je t\u0159eba synchronizovat a kontrolovat, jeliko\u017e generuj\u00ed, m\u011bn\u00ed a zpracov\u00e1vaj\u00ed na\u0161e data. S p\u0159\u00edchodem nov\u00fdch technologi\u00ed a paradigmat vznikaj\u00ed nov\u00e9 slo\u017eitosti a \u00fakoly ve v\u0161ech f\u00e1z\u00edch \u017eivotn\u00edho cyklu aplikac\u00ed. To zahrnuje integraci v\u00fdvoje a provozu (DevOps), kontejnery, Internet v\u011bc\u00ed (IoT), n\u00e1stroje s otev\u0159en\u00fdm zdrojov\u00fdm k\u00f3dem, API a dal\u0161\u00ed. <\/p>\n<p>Distribuovan\u00e9 umis\u0165ov\u00e1n\u00ed aplikac\u00ed a rozmanitost technologi\u00ed vytv\u00e1\u0159ej\u00ed slo\u017eit\u00e9 a komplexn\u00ed \u00fakoly nejen pro specialisty na informa\u010dn\u00ed bezpe\u010dnost, ale tak\u00e9 pro v\u00fdrobce bezpe\u010dnostn\u00edch \u0159e\u0161en\u00ed, kte\u0159\u00ed se ji\u017e nemohou spol\u00e9hat na jednotn\u00fd p\u0159\u00edstup. Ochrann\u00e9 prost\u0159edky aplikac\u00ed mus\u00ed zohled\u0148ovat jejich obchodn\u00ed specifika, aby se p\u0159ede\u0161lo chybn\u00fdm aktivac\u00edm a naru\u0161en\u00ed kvality slu\u017eeb pro u\u017eivatele. <\/p>\n<p>Kone\u010dn\u00fdm c\u00edlem hacker\u016f je obvykle bu\u010f kr\u00e1de\u017e dat, nebo naru\u0161en\u00ed dostupnosti slu\u017eeb. Zlo\u010dinci tak\u00e9 t\u011b\u017e\u00ed z technologick\u00e9 evoluce. Zaprv\u00e9, v\u00fdvoj nov\u00fdch technologi\u00ed vytv\u00e1\u0159\u00ed v\u00edce potenci\u00e1ln\u00edch zranitelnost\u00ed. Zadruh\u00e9, v jejich arzen\u00e1lu je v\u00edce n\u00e1stroj\u016f a znalost\u00ed k obch\u00e1zen\u00ed tradi\u010dn\u00edch ochrann\u00fdch prost\u0159edk\u016f. To v\u00fdrazn\u011b zvy\u0161uje takzvanou \"\u00fato\u010dnou plochu\" a zranitelnost organizac\u00ed v\u016f\u010di nov\u00fdm rizik\u016fm. Bezpe\u010dnostn\u00ed politiky se mus\u00ed neust\u00e1le m\u011bnit v souladu s technologick\u00fdmi a aplika\u010dn\u00edmi zm\u011bnami. <\/p>\n<p>Aplikace mus\u00ed b\u00fdt chr\u00e1n\u011bny proti st\u00e1le rostouc\u00edmu mno\u017estv\u00ed metod a zdroj\u016f \u00fatok\u016f, a odr\u00e1\u017een\u00ed automatick\u00fdch \u00fatok\u016f by m\u011blo prob\u00edhat v re\u00e1ln\u00e9m \u010dase na z\u00e1klad\u011b informovan\u00fdch rozhodnut\u00ed. V\u00fdsledkem jsou vy\u0161\u0161\u00ed provozn\u00ed n\u00e1klady a ru\u010dn\u00ed pr\u00e1ce na pozad\u00ed oslaben\u00fdch pozic v oblasti bezpe\u010dnosti. <\/p>\n<h4>\u00dakol \u010d. 1: Spr\u00e1va bot\u016f<\/h4>\n<p>\nV\u00edce ne\u017e 60 % internetov\u00e9ho provozu generuj\u00ed boti, z nich\u017e polovina se t\u00fdk\u00e1 \"\u0161patn\u00e9ho\" provozu (podle \u00fadaj\u016f <noindex><a rel=\"nofollow\" href=\"https:\/\/radware.pro\/catalog\/2018-2019-radware-global-application-network-security-report\/\">zpr\u00e1vy o bezpe\u010dnosti Radware<\/a><\/noindex>). Organizace investuj\u00ed do zv\u00fd\u0161en\u00ed \u0161\u00ed\u0159ky p\u00e1sma s\u00edt\u011b, prakticky zaji\u0161\u0165uj\u00ed fiktivn\u00ed zat\u00ed\u017een\u00ed. P\u0159esn\u00e9 rozli\u0161en\u00ed mezi skute\u010dn\u00fdm u\u017eivatelsk\u00fdm provozem a botovsk\u00fdm provozem, stejn\u011b jako mezi \u201edobr\u00fdmi\u201c boty (nap\u0159\u00edklad vyhled\u00e1vac\u00edmi roboty a slu\u017ebami porovn\u00e1v\u00e1n\u00ed cen) a \u201e\u0161patn\u00fdmi\u201c boty, m\u016f\u017ee v\u00e9st k v\u00fdznamn\u00fdm \u00faspor\u00e1m a zlep\u0161en\u00ed kvality slu\u017eeb pro u\u017eivatele. <\/p>\n<p>Boti nemaj\u00ed v \u00famyslu usnadnit tuto \u00falohu a mohou napodobovat chov\u00e1n\u00ed skute\u010dn\u00fdch u\u017eivatel\u016f, obch\u00e1zet CAPTCHA a dal\u0161\u00ed p\u0159ek\u00e1\u017eky. Nav\u00edc, v p\u0159\u00edpad\u011b \u00fatok\u016f pomoc\u00ed dynamick\u00fdch IP adres, ochrana na z\u00e1klad\u011b filtrace podle IP adresy se st\u00e1v\u00e1 ne\u00fa\u010dinnou. \u010casto se pou\u017e\u00edvaj\u00ed prost\u0159edky otev\u0159en\u00e9ho zdroje (nap\u0159\u00edklad Phantom JS), kter\u00e9 dok\u00e1\u017eou zpracov\u00e1vat klientsk\u00fd JavaScript, k prov\u00e1d\u011bn\u00ed brute-force \u00fatok\u016f, credential stuffing \u00fatok\u016f, DDoS \u00fatok\u016f a automatick\u00fdch bot\u00edch \u00fatok\u016f. <\/p>\n<p>Pro efektivn\u00ed \u0159\u00edzen\u00ed bot\u00edho provozu je vy\u017eadov\u00e1na unik\u00e1tn\u00ed identifikace jeho zdroje (jako otisk prstu). Proto\u017ee v p\u0159\u00edpad\u011b bot\u00edho \u00fatoku vznik\u00e1 mnoho z\u00e1pis\u016f, jeho otisk umo\u017e\u0148uje odhalovat podez\u0159elou aktivitu a p\u0159id\u011blovat sk\u00f3re, na jeho\u017e z\u00e1klad\u011b ochrann\u00fd syst\u00e9m aplikac\u00ed \u010din\u00ed informovan\u00e9 rozhodnut\u00ed \u2013 blokovat\/povolit \u2013 s minim\u00e1ln\u00edm po\u010dtem fale\u0161n\u011b pozitivn\u00edch v\u00fdsledk\u016f. <\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/radware.pro\/catalog\/2018-2019-radware-global-application-network-security-report\/\"><img decoding=\"async\" alt=\"Funkcionalita modern\u00edch syst\u00e9m\u016f ochrany aplikac\u00ed (WAF) by m\u011bla b\u00fdt mnohem \u0161ir\u0161\u00ed ne\u017e seznam zranitelnost\u00ed v OWASP Top 10\" src=\"\/wp-content\/uploads\/2019\/11\/54764c31a86863be4e6f4ed16ff4b65c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<h4>\u00dakol \u010d. 2: Ochrana API<\/h4>\n<p>\nMnoho aplikac\u00ed shroma\u017e\u010fuje informace a data z slu\u017eeb, se kter\u00fdmi komunikuj\u00ed prost\u0159ednictv\u00edm API. P\u0159i p\u0159enosu citliv\u00fdch dat prost\u0159ednictv\u00edm API v\u00edce ne\u017e 50 % organizac\u00ed neprov\u00e1d\u00ed \u017e\u00e1dn\u00e9 ov\u011b\u0159en\u00ed ani ochranu APIs pro detekci kybernetick\u00fdch \u00fatok\u016f. <\/p>\n<p>P\u0159\u00edklady vyu\u017eit\u00ed API:<\/p>\n<ul>\n<li>Integrace internetu v\u011bc\u00ed (IoT)<\/li>\n<li>Mezi strojov\u00e9 interakce<\/li>\n<li>Serverless prost\u0159ed\u00ed <\/li>\n<li>Mobiln\u00ed aplikace<\/li>\n<li>Aplikace \u0159\u00edzen\u00e9 ud\u00e1lostmi<\/li>\n<\/ul>\n<p>\nZranitelnosti API jsou podobn\u00e9 zranitelnostem aplikac\u00ed a zahrnuj\u00ed injekce, \u00fatoky na protokoly, manipulaci s parametry, p\u0159esm\u011brov\u00e1n\u00ed a \u00fatoky bot\u016f. Dedikovan\u00e9 API br\u00e1ny zaji\u0161\u0165uj\u00ed kompatibilitu aplikac\u00ed, kter\u00e9 komunikuj\u00ed prost\u0159ednictv\u00edm API. Nicm\u00e9n\u011b neposkytuj\u00ed end-to-end zabezpe\u010den\u00ed aplikace jako WAF s pot\u0159ebn\u00fdmi bezpe\u010dnostn\u00edmi n\u00e1stroji, jako je anal\u00fdza HTTP hlavi\u010dek, \u0159\u00edzen\u00ed p\u0159\u00edstupu Layer 7 (ACL), parsov\u00e1n\u00ed a ov\u011b\u0159ov\u00e1n\u00ed JSON\/XML payloadu a ochrana proti v\u0161em zranitelnostem z OWASP Top 10. Toho je dosa\u017eeno inspekc\u00ed kl\u00ed\u010dov\u00fdch hodnot API s pou\u017eit\u00edm pozitivn\u00edch a negativn\u00edch model\u016f. <\/p>\n<h4>\u00dakol \u010d. 3: Odm\u00edtnut\u00ed slu\u017eby<\/h4>\n<p>\nStar\u00fd vektor \u00fatok\u016f \u2014 odm\u00edtnut\u00ed slu\u017eby (DoS) \u2014 st\u00e1le dokazuje svou \u00fa\u010dinnost v \u00fatoc\u00edch na aplikace. \u00dato\u010dn\u00edci maj\u00ed k dispozici celou \u0159adu \u00fasp\u011b\u0161n\u00fdch technik naru\u0161en\u00ed \u010dinnosti aplikac\u00ed, v\u010detn\u011b HTTP nebo HTTPS flood\u016f, low-and-slow \u00fatok\u016f (nap\u0159\u00edklad SlowLoris, LOIC, Torshammer), \u00fatok\u016f s vyu\u017eit\u00edm dynamick\u00fdch IP adres, p\u0159ete\u010den\u00ed bufferu, bruteforce \u00fatok\u016f a mnoha dal\u0161\u00edch. S rozvojem Internetu v\u011bc\u00ed a n\u00e1sledn\u00fdm vznikem IoT botnet\u016f se \u00fatoky na aplikace staly hlavn\u00edm sm\u011brem DDoS \u00fatok\u016f. V\u011bt\u0161ina WAF s monitorov\u00e1n\u00edm stavu spojen\u00ed m\u016f\u017ee odol\u00e1vat pouze omezen\u00e9mu mno\u017estv\u00ed z\u00e1t\u011b\u017ee. Nicm\u00e9n\u011b, mohou inspektovat toky HTTP\/S provozu a odstra\u0148ovat \u00fato\u010dn\u00e9 provozy a \u0161kodliv\u00e9 p\u0159ipojen\u00ed. Po zji\u0161t\u011bn\u00ed \u00fatoku nen\u00ed smysl znovu propou\u0161t\u011bt tento provoz. Vzhledem k omezen\u00e9 \u0161\u00ed\u0159ce p\u00e1sma WAF pro odra\u017een\u00ed \u00fatok\u016f je t\u0159eba dal\u0161\u00ed \u0159e\u0161en\u00ed na perimetru s\u00edt\u011b pro automatick\u00e9 blokov\u00e1n\u00ed n\u00e1sleduj\u00edc\u00edch \"\u0161patn\u00fdch\" paket\u016f. Pro tento sc\u00e9n\u00e1\u0159 ochrany by ob\u011b \u0159e\u0161en\u00ed m\u011bla m\u00edt schopnost vz\u00e1jemn\u00e9 interakce pro v\u00fdm\u011bnu informac\u00ed o \u00fatoc\u00edch. <\/p>\n<p><img decoding=\"async\" alt=\"Funkcionalita modern\u00edch syst\u00e9m\u016f ochrany aplikac\u00ed (WAF) by m\u011bla b\u00fdt mnohem \u0161ir\u0161\u00ed ne\u017e seznam zranitelnost\u00ed v OWASP Top 10\" src=\"\/wp-content\/uploads\/2019\/11\/0891b6ac8b043b813a831fc8bede5122.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Obr 1. Organizace komplexn\u00ed ochrany s\u00edt\u011b a aplikac\u00ed na p\u0159\u00edkladu \u0159e\u0161en\u00ed Radware<\/i><\/p>\n<h4>\u00dakol \u010d. 4: Nep\u0159etr\u017eit\u00e1 ochrana<\/h4>\n<p>\nAplikace jsou \u010dasto vystaveny zm\u011bn\u00e1m. Metodologie v\u00fdvoje a uveden\u00ed na trh, jako je kontinuita aktualizac\u00ed, znamenaj\u00ed, \u017ee zm\u011bny prob\u00edhaj\u00ed bez lidsk\u00e9ho z\u00e1sahu a kontroly. V takov\u00fdch dynamick\u00fdch podm\u00ednk\u00e1ch je obt\u00ed\u017en\u00e9 udr\u017eovat adekv\u00e1tn\u00ed fungov\u00e1n\u00ed bezpe\u010dnostn\u00edch politik bez vysok\u00e9ho po\u010dtu fale\u0161n\u00fdch pozitivn\u00edch sign\u00e1l\u016f. Mobiln\u00ed aplikace se aktualizuj\u00ed mnohem \u010dast\u011bji ne\u017e webov\u00e9 aplikace. Aplikace t\u0159et\u00edch stran se mohou zm\u011bnit bez va\u0161eho v\u011bdom\u00ed. N\u011bkter\u00e9 organizace se sna\u017e\u00ed z\u00edskat v\u011bt\u0161\u00ed kontrolu a vizualizaci, aby z\u016fstaly v obraze o potenci\u00e1ln\u00edch rizic\u00edch. Av\u0161ak to nen\u00ed v\u017edy dosa\u017eiteln\u00e9 a spolehliv\u00e1 ochrana aplikac\u00ed by m\u011bla vyu\u017e\u00edvat schopnosti strojov\u00e9ho u\u010den\u00ed pro zohledn\u011bn\u00ed a vizu\u00e1ln\u00ed zobrazen\u00ed existuj\u00edc\u00edch zdroj\u016f, anal\u00fdzu potenci\u00e1ln\u00edch hrozeb a vytv\u00e1\u0159en\u00ed a optimalizaci bezpe\u010dnostn\u00edch politik v p\u0159\u00edpad\u011b modifikace aplikac\u00ed.<\/p>\n<h4>Z\u00e1v\u011bry<\/h4>\n<p>\nJak aplikace hraj\u00ed st\u00e1le d\u016fle\u017eit\u011bj\u0161\u00ed roli v ka\u017edodenn\u00edm \u017eivot\u011b, st\u00e1vaj\u00ed se hlavn\u00edm c\u00edlem hacker\u016f. Potenci\u00e1ln\u00ed zisk pro \u00fato\u010dn\u00edky a mo\u017en\u00e9 ztr\u00e1ty pro podniky jsou obrovsk\u00e9. Slo\u017eitost \u00fakolu zaji\u0161t\u011bn\u00ed bezpe\u010dnosti aplikac\u00ed nelze p\u0159ece\u0148ovat, s ohledem na mno\u017estv\u00ed a variace aplikac\u00ed a hrozeb. <\/p>\n<p>Na\u0161t\u011bst\u00ed jsme v dob\u011b, kdy n\u00e1m m\u016f\u017ee um\u011bl\u00e1 inteligence pomoci. Algoritmy zalo\u017een\u00e9 na strojov\u00e9m u\u010den\u00ed poskytuj\u00ed adaptivn\u00ed ochranu v re\u00e1ln\u00e9m \u010dase proti nejvysp\u011blej\u0161\u00edm kybernetick\u00fdm hrozb\u00e1m zam\u011b\u0159en\u00fdm na aplikace. Tak\u00e9 automaticky aktualizuj\u00ed bezpe\u010dnostn\u00ed politiky k ochran\u011b webov\u00fdch, mobiln\u00edch a cloudov\u00fdch aplikac\u00ed \u2014 i API \u2014 bez fale\u0161n\u00fdch pozitivn\u00edch sign\u00e1l\u016f.<\/p>\n<p>Je obt\u00ed\u017en\u00e9 p\u0159esn\u011b p\u0159edpov\u011bd\u011bt, jak\u00e1 bude nov\u00e1 generace kyberhrozeb pro aplikace (mo\u017en\u00e1 tak\u00e9 zalo\u017een\u00e1 na strojov\u00e9m u\u010den\u00ed). Ale organizace mohou ur\u010dit\u011b podniknout kroky k ochran\u011b \u00fadaj\u016f sv\u00fdch klient\u016f, du\u0161evn\u00edho vlastnictv\u00ed a zaji\u0161t\u011bn\u00ed dostupnosti slu\u017eeb s velk\u00fdm p\u0159\u00ednosem pro podnik\u00e1n\u00ed.<\/p>\n<p>Efektivn\u00ed p\u0159\u00edstupy a metody zaji\u0161t\u011bn\u00ed bezpe\u010dnosti aplikac\u00ed, hlavn\u00ed typy a vektory \u00fatok\u016f, rizikov\u00e9 z\u00f3ny a mezery v kybernetick\u00e9 ochran\u011b webov\u00fdch aplikac\u00ed, stejn\u011b jako sv\u011btov\u00e9 zku\u0161enosti a osv\u011bd\u010den\u00e9 postupy jsou uvedeny ve studii a zpr\u00e1v\u011b Radware.<noindex><a rel=\"nofollow\" href=\"https:\/\/radware.pro\/catalog\/web_application_security_digitally_connected_world_2019\/\">Bezpe\u010dnost webov\u00fdch aplikac\u00ed v digit\u00e1ln\u011b propojen\u00e9m sv\u011bt\u011b<\/a><\/noindex>\u201d.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/476490\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0420\u0435\u0442\u0440\u043e\u0441\u043f\u0435\u043a\u0442\u0438\u0432\u0430 \u041c\u0430\u0441\u0448\u0442\u0430\u0431, \u0441\u043e\u0441\u0442\u0430\u0432 \u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437 \u0434\u043b\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0431\u044b\u0441\u0442\u0440\u043e \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u044e\u0442. \u0414\u043e\u043b\u0433\u0438\u0435 \u0433\u043e\u0434\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432. \u0412 \u043a\u0430\u0436\u0434\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0431\u044b\u043b\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c 2-5 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432, \u0438 \u043d\u0430\u0431\u043e\u0440 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0431\u044b\u043b \u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u043e\u0447\u0442\u0438 \u0432\u0441\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0431\u044b\u043b\u0438 \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c SQL. \u041a [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-52993","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0420\u0435\u0442\u0440\u043e\u0441\u043f\u0435\u043a\u0442\u0438\u0432\u0430 \u041c\u0430\u0441\u0448\u0442\u0430\u0431, \u0441\u043e\u0441\u0442\u0430\u0432 \u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437 \u0434\u043b\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0431\u044b\u0441\u0442\u0440\u043e \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u044e\u0442. \u0414\u043e\u043b\u0433\u0438\u0435 \u0433\u043e\u0434\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/funktsional-sovremennyh-sistem-zashhity-prilozhenij-waf-dolzhen-byt-gorazdo-shire-spiska-uyazvimostej-iz-owasp-top-10\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0424\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (WAF) \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0448\u0438\u0440\u0435 \u0441\u043f\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0437 OWASP \u0422\u043e\u043f 10 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0420\u0435\u0442\u0440\u043e\u0441\u043f\u0435\u043a\u0442\u0438\u0432\u0430 \u041c\u0430\u0441\u0448\u0442\u0430\u0431, \u0441\u043e\u0441\u0442\u0430\u0432 \u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437 \u0434\u043b\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0431\u044b\u0441\u0442\u0440\u043e \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u044e\u0442. \u0414\u043e\u043b\u0433\u0438\u0435 \u0433\u043e\u0434\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/funktsional-sovremennyh-sistem-zashhity-prilozhenij-waf-dolzhen-byt-gorazdo-shire-spiska-uyazvimostej-iz-owasp-top-10\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-20T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:00:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Funkcionalita modern\u00edch syst\u00e9m\u016f ochrany aplikac\u00ed (WAF) by m\u011bla b\u00fdt mnohem \u0161ir\u0161\u00ed, ne\u017e jen seznam zranitelnost\u00ed z OWASP Top 10 | ProHoster","description":"Retrospektiva Rozsah, slo\u017een\u00ed a struktura kybernetick\u00fdch hrozeb pro aplikace se rychle vyv\u00edjej\u00ed. Po dlouh\u00e1 l\u00e9ta m\u011bli u\u017eivatel\u00e9 p\u0159\u00edstup k webov\u00fdm aplikac\u00edm p\u0159es internet pomoc\u00ed popul\u00e1rn\u00edch webov\u00fdch prohl\u00ed\u017ee\u010d\u016f.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/funktsional-sovremennyh-sistem-zashhity-prilozhenij-waf-dolzhen-byt-gorazdo-shire-spiska-uyazvimostej-iz-owasp-top-10","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0424\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (WAF) \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0448\u0438\u0440\u0435 \u0441\u043f\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0437 OWASP \u0422\u043e\u043f 10 | ProHoster","og:description":"\u0420\u0435\u0442\u0440\u043e\u0441\u043f\u0435\u043a\u0442\u0438\u0432\u0430 \u041c\u0430\u0441\u0448\u0442\u0430\u0431, \u0441\u043e\u0441\u0442\u0430\u0432 \u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437 \u0434\u043b\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0431\u044b\u0441\u0442\u0440\u043e \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u044e\u0442. \u0414\u043e\u043b\u0433\u0438\u0435 \u0433\u043e\u0434\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/funktsional-sovremennyh-sistem-zashhity-prilozhenij-waf-dolzhen-byt-gorazdo-shire-spiska-uyazvimostej-iz-owasp-top-10","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-20T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52993","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 05:40:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:33:28","updated":"2026-01-24 05:40:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/52993","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=52993"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/52993\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=52993"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=52993"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=52993"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}