How does Application Security work?

Application Security is built for speedy deployment, with minimal impact on development streams and performance.

The Application Security protection can be added in three types of environments:

• as a layer, protecting functions running in AWS Lambda
• as an agent providing function self protection for Azure Functions
• as a runtime protection agent, included in web application packages

Application Security layer for AWS Lambda

Functions running with AWS Lambda can be protected leveraging Application Security layers for AWS Lambda. The Application Security layer protection can be configured in seconds, without requiring code change. In order to protect your functions, three main components need to be configured:

• Security Groups: A security group defines the common set of policies for a collection of serverless functions. The security group can include multiple instances of serverless functions. A security group is assigned a key and secret to authenticate and authorize an Application Security layer as being associated with the security group. For more information, see Add a group.

• Layer: Application Security Layer provides the protection for the function code and libraries, without needing to modify your development code. You just need to configure the Application Security Layer with your function in AWS Lambda and include the required keys. For more information, see AWS Lambda Configuration.

• Policies: Policies are a collection of rules that protect your functions from a variety of threats. The threats Application Security policies protect against are:

  • Malicious payload
  • SQL injection
  • Illegal file access
  • Remote command execution
  • Open redirect
  • Malicious file upload
  • IP protection

Whenever a policy is triggered, an event is displayed on the Application Security dashboard that indicates how serious the threat is. For more information, see Configure a policy.

Function self protection for Azure functions

Functions running with Azure Functions can be protected leveraging the Application Security agents. The Application Security agent takes only a few moments to add to the Function to add the protection, and only two main components need to be configured:

• Security groups: A security group defines the common set of policies for a collection of serverless functions. The security group can include multiple instances of serverless functions. A security group is assigned a key and secret to authenticate and authorize an Application Security agent as being associated with the security group. For more information, see Add a group.

• Policies: Policies are a collection of rules that protect your functions from a variety of threats. The threats Application Security policies protect against are:

  • Malicious payload
  • SQL injection
  • Illegal file access
  • Remote command execution
  • Open redirect
  • Malicious file upload
  • IP protection

Whenever a policy is triggered, an event is displayed on the Application Security dashboard that indicates how serious the threat is. For more information, see Configure a policy.

The function self protection for Azure Functions supports the following combinations: - Python programming language for python 3.6 to 3.8 - HTTP Trigger - Linux Operating System

Application Security runtime protection agent

It only takes a moment to add the agent to your application, and there is no need to change your development code. There are three main components that need to be configured to protect your application:

• Security groups: A security group is a collection of web applications and / or serverless functions sharing a common set of policies. The security group can include multiple instances of an application, multiple applications and / or serverless functions. A security group is assigned a key and secret to authenticate and authorize an agent as being associated with the security group. For more information, see Add a group.

• Agents: Application Security agent's act as a library that is integrated with your application, without needing to modify your development code. You just need to include the Application Security agent with your application and activate it with the application keys. For more information, see Install an agent.

• Policies: Policies are a collection of rules that protect your application from a variety of threats. The threats Application Security policies protect against are:

  • Malicious payload
  • SQL injection
  • Illegal file access
  • Remote command execution
  • Open redirect
  • Malicious file upload
  • IP protection

Whenever a policy is triggered, an event is displayed on the Application Security dashboard that indicates how serious the threat is. For more information, see Configure a policy.