ModSecurity

Mentors: Student: m2n

<p>libModSecurity (aka ModSecurity v3) is a major rewrite of standalone ModSecurity (v2.x) which have high dependencies on 3rd party project including Apache. Now the project is splitted into two components namely connectors and core. Where the core is underlying library and connectors are the consumer of this library. This way ModSecurity cores becomes completely independent of underlying web server. In this project we will be extending the support of ModSecurity to Node.js by creating a ModSecurity connector for Node.js. This will provide ModSecurity support to a large community of Node.js developers as there are not many waf available in Node.js.</p>

Mentors: Student: Akhil Koul

<p>HTTP checks are mostly done via regex in IDS like Snort. This limits the flexibility to write custom rules to suit one’s needs. This proposal focuses on making libmodsecurity work for http checks given in snort by replacing them with rules in libmodsecurity. Comparison of speed of parsing in both the cases will also be tested.</p>

Mentors: Student: Tahir Ramzan

<p>This connector will create an interface between the Apache Web Server to the libModSecurity. By creating this connector, the target application will be able to apply ModSecurity inspections and actions on Apache Web Server.</p>