Agentic data science with the Data Agent Kit
cloud.google.com·7h ago
AI Research
arXiv CS.AI·Sep 9·5 min read
WAPP: Safe Learning of Positive Security WAF Policies from Live Traffic
TL;DR
WAPP, or Whitelisting Autonomous Policy Producer, is a framework designed to safely learn positive security policies for Web Application Firewalls (WAFs) from live traffic. It significantly improves resilience against malicious data contamination, achieving up to 90% poisoning resilience in tests.
✦ Why It Matters
Implement WAPP to enhance your WAF's resilience against malicious traffic contamination today.
Key Takeaways
- Adopt WAPP for safer WAF policy learning from live traffic.
- Monitor traffic contamination levels to maintain WAF effectiveness.
- Utilize deterministic rule synthesis to reduce inference costs.
- Focus on precision control for handling free text inputs.
How It Works
WAPP combines several techniques to ensure safe learning from live traffic. It employs trust filtering to identify and exclude potentially malicious requests, deterministic rule synthesis to create reliable security policies, and confidence scoring to assess the validity of learned patterns.
Validation steps are included before enforcing any new rules, ensuring that only safe policies are applied.