*1: Market research on “cloud based WAF service” Ī global Web Application Security Company, with services implemented in over 5000 systems. ※ Company names and product names listed are trademarks and registered trademarks of their respective owners. In October 2018, CSC acquired a patent related to signature selection process of WAF, and by offering 24/7 technical support *2 & individual customization by top-class security engineers with flexible services tailored to the needs of customers, WafCharm has made AWS WAF operations easier for users.įor more information, please visit WafCharm. Based on user’s system configuration and access status, WafCharm uses AI to automatically identify and apply the most optimum signatures, based on hundreds of billions of Big Data cultivated through in-house developed cloud based WAF “Shadankun”, which has No.1 adoption rate in Japan. WafCharm is a service for automation of AWS WAF operations using AI & Big Data.

WafCharm automates the AWS WAF operations and corresponds to false-positives and new vulnerabilities.

Easy to deploy with no need of rule creation.

WafCharm comes with a blacklist function by IP reputation as a standard feature, which protects the API from malicious access.

Protecting the API from threats such as SQL injection and cross site scripting.

Using WafCharm have the following benefits: WafCharm now supports Amazon API Gateway, along with Amazon CloudFront and Application Load Balancer (ALB). However, these are not the best solutions, and therefore, new features were added to resolve these issues, that allowed AWS WAF to support Amazon API Gateway (Fig.4).įollowing AWS WAF's support for the Amazon API Gateway, Cyber Security Cloud (CSC) introduced WafCharm's supports for it with the aim of further improving false-positive correspondence and system operation convenience.

Due to this, some users implemented defense measures on Amazon CloudFront (Fig. Until the update from AWS, AWS WAF didn't support Amazon API Gateway, and therefore web security measures couldn't be easily implemented (Fig.

Api gateway waf