Automatic policy bluilding and SQL-INJECTION

Hi Dechir,

 

The policy builder is a tool that is creating policies automatically. It needs to see a decent amount of traffic before it could stabilize a policy (needs to see enough traffic to collect stats and build heuristics), by stabilize a policy I mean that it will learn how good traffic looks like and promote the policy into enforcement and blocking mode. The policy builder does have the capability to sort out attacks from valid traffic, however, if you try to attack the website before the policy builder stabilized a security policy, most chances are that the attack will go through as the policy doesn't enforce rules.