Forum Discussion
Can F5 help with the vulnerability in WAZE social-traffic app?
Method: Man-in-the-middle HTTPS Proxy.
Ability: Create ghost cars to receive real driver's location broadcast when driving. Create a fake traffic jam.
Researchers pointed out WAZE servers did not de...
Yann_Desmarest
Cirrus
CirrusHello,
From what I understand on the attack, you can use rate limiting feature. You can also mitigate this vulnerability by using the DDoS feature from the ASM module that is anomaly based, source IP based or URL based detection. Or, you can write and deploy an irule that do intelligent rate limiting.