Penta Security Launches 'Protocol Validity Protection', a Managed Rule Exclusively for AWS WAF

Overview Penta Security Inc. (Headquarters: Seoul, South Korea; Japan branch representative: Chen Jung-hee), an information security company, has launched 'Cloudbric Managed Rules for AWS WAF - Protocol Validity Protection', a new managed rule for AWS WAF provided by Amazon Web Services (AWS).

Background In recent years, attacks such as Request Smuggling, which exploit the way web servers process requests, have become frequent, rapidly increasing the demand for security measures at the protocol level. Conventional security measures have focused primarily on detection; however, to address the increasing complexity and sophistication of these attacks, the importance of 'proactive security'—blocking attacks before they occur—is growing.

Overview of Protocol Validity Protection Unlike conventional measures focused on attack detection, 'Cloudbric Managed Rules for AWS WAF - Protocol Validity Protection' verifies in real-time whether protocols adhere to standard request formats. It proactively blocks attempts to bypass security controls via HTTP request smuggling or unauthorized method/header manipulation. This allows for the enhancement of web application security levels without the need for new construction work.

This is the 7th managed rule available for purchase on the AWS Marketplace, following OWASP Top 10 Protection, Malicious IP Protection, Tor IP Protection, Bot Protection, Anonymous IP Protection, and API Protection.

About Cloudbric Managed Rules Cloudbric Managed Rules are managed rules dedicated to AWS WAF. Developed based on advanced security technology, they respond quickly to the latest threats. Since WAF rules are pre-defined, AWS WAF users can easily apply them without needing to create their own rules. Users can choose and introduce rules from the seven types provided on the AWS Marketplace according to the areas where they wish to improve security performance.

About Penta Security Inc. Representing South Korea's IT industry, Penta Security is a premier information security company. They provide solutions for enterprise information security, including the data encryption platform 'D.AMO', the cloud-based security platform service 'Cloudbric', and authentication security. They have acquired patents in Japan, South Korea, the US, and Europe for their advanced encryption and threat detection technologies, and operate in 171 countries worldwide. They are also actively developing IoT security and blockchain-based services.