Topsec Web Application Firewall System

TopWAF is developed based on NGTOS 64-bit security operating system which adopts an advanced multi-channel multi-core architecture. NGTOS uses a user-mode protocol stack compatible with TCP/IP features, and avoids the operating system context switch and kernel space to user space data copy in the traditional kernel mode protocol stack, which optimizes system efficiency.

TopWAF provides accurate and detailed attack protection for Web applications by two-way deep detection of Web application traffic, preventing attacks such as SQL injection, XSS, and CSRF. It can effectively respond to threats and variants defined by OWASP Top 10. For the requests, TopWAF checks the legitimacy and compliance of the request before the attack data arrives at the Web server, and prevents malicious requests or requests with malicious code from accessing the Web application.

Compared with network layer DDoS attacks, application layer DDoS attacks are more operative and harmful. Currently, application layer DDoS attacks have become a key direction of Web security protection. Leveraging advanced source reputation analysis, TopWAF dynamically learns malicious traffic based on long-term traffic model learning results and historical records, and effectively defends against DDoS attacks of various types of application layers, such as the current popular HTTP flood, CC, and slow attacks. TopWAF can effectively identify and block the application layer DDoS, ensuring that the web server can provide services for real users and ensure the continuity of customer service.

TopWAF can display the running status of the system in real time, and display the attack behavior (including attack parameter information, attack type, triggering rules, attack detection process, tampering behavior, DDOS attack information, etc.) in the network to provide threat statistics. It can analyze the attack information of the protected object and display it in the attack event list while generating the attack log. Through the TopWAF log report, the attack source and website vulnerability can be quickly tracked to ensure network security.