https://linuxeries.org/tags/waap/ Recent content in Waap on ShieldedBytes Hugo en Sat, 31 Oct 2026 10:15:00 +0100 https://linuxeries.org/post/2026-10-31-the-waf-is-learning-ml-and-behavioral-analysis/ Sat, 31 Oct 2026 10:15:00 +0100 https://linuxeries.org/post/2026-10-31-the-waf-is-learning-ml-and-behavioral-analysis/ <p>For years, a web application firewall was mostly a large list of known-bad patterns. It was useful, but brittle. A new attack vector slipped through until someone wrote a signature, and legitimate traffic that happened to look like an old attack got blocked. The usual fix was more rules, more tuning, and more full-time WAF administration.</p> <p>A different model is now in production at several major vendors. Instead of asking <em>&ldquo;does this request match a known attack?&rdquo;</em>, these systems ask <em>&ldquo;does this request look like it belongs here?&rdquo;</em> The answer comes from models that learn what normal traffic looks like for a specific application and flag deviations from that baseline.</p>