WAFs in the cloud
In a recent OWASP meeting I gave an overview presentation on how WAFs interact with cloud computing, both utilizing the cloud and protecting cloud based applications. I have discussed the following scenarios:
- Enterprise Security Gateway
- WAF as a service: For protecting a data center or SaaS
- WAF for a cloud deployment: Host Based or Infrastructure Based
- WAF stubs
You can download the presentation here.