{"id":11034,"date":"2019-09-11T14:32:27","date_gmt":"2019-09-11T14:32:27","guid":{"rendered":"https:\/\/www.webscale.com\/?post_type=blog&p=11034"},"modified":"2023-12-29T08:15:47","modified_gmt":"2023-12-29T13:15:47","slug":"shield-online-storefront-cyberthreats-webscale-web-controls","status":"publish","type":"post","link":"https:\/\/www.webscale.com\/blog\/shield-online-storefront-cyberthreats-webscale-web-controls\/","title":{"rendered":"How to Shield Your Online Storefront from Cyberthreats with Webscale\u2019s Web Controls"},"content":{"rendered":"

Since the advent of digital commerce, hackers have kept both online merchants and the cybersecurity industry on their toes. Large security breaches occur almost every other week, and cyber-attacks on industry giants such as Marriott Hotels<\/a>, Facebook<\/a>, and Target<\/a> continue to remain in the news<\/a>. What\u2019s more, with cybercriminals becoming more sophisticated and using automation to execute attacks at scale, the need for advanced security to protect digital storefronts and users (their identities and credit card data), is higher than ever before.<\/p>\n

The most sophisticated hackers today are no longer coming through the \u201cfront door\u201d and launching massive DDoS attacks; instead, attacks are becoming more frequent at the \u201cback door\u201d, or the application layer where most of the customer information resides. (Learn more about how cyber-attacks on Magento storefronts are typically executed<\/a>.)<\/p>\n

Fortunately, online merchants can avoid a great deal of pain by regularly updating their security patches (for known vulnerabilities), using a web application firewall (WAF), and periodically reviewing whitelists.<\/p>\n

How a WAF helps<\/h3>\n

A WAF provides a layer of protection between a web application and the Internet. It determines, based on pre-defined rules and the site administrator\u2019s directions, who or what enters the web application. WAFs protect web applications by monitoring and filtering web traffic (differentiating between legitimate users and illegitimate traffic), and mitigating a wide range of cyberthreats.<\/p>\n

Most WAFs have pre-defined rules (or policies) built in for protecting against commonly known threats, such as the OWASP Top 10<\/a>. Rules may also involve adding IP addresses belonging to known bad actors (or malicious bots) to a block list.<\/p>\n

Is this enough?<\/h3>\n

Picture this. The person responsible for your web application\u2019s security went on a well-deserved vacation two days ago. Your e-commerce platform provider published a vulnerability (they just found out about) in the interim and a patch to fix the same. A hacker uses this window of opportunity to gain admin access to your storefront and steals credit card data (remember, hackers are always staying on top of vulnerabilities, even when you aren\u2019t).<\/p>\n

How would you deal with this security breach? What do you do when the origin of the attack doesn\u2019t show up on published lists of bad actors? What happens when you\u2019re facing a zero-day attack<\/a>? How do you deal with a cyberattack that\u2019s already in progress?<\/p>\n

The answer…you need to be able to customize your WAF, in real-time.<\/p>\n

It\u2019s easier said than done, however. To customize and configure new security rules in your WAF, you need the help of a security expert that can make the necessary code changes. These highly-skilled professionals can be both expensive and hard to find.<\/p>\n

That\u2019s where Webscale\u2019s Web Controls come to the rescue.<\/p>\n

Web Controls: No Code, No Compromise, No Complexity<\/h3>\n

Webscale\u2019s Web Controls enable site administrators to use pre-defined, pre-tested security rulesets based on their e-commerce application, minimizing the need to discover, define, and maintain the rules themselves.<\/p>\n

With Web Controls, site administrators can also create the equivalent of firewall rules, without having a deep technical understanding of how to build them. They have been designed to allow a user, of any skill set (technical as well as non-technical), to quickly take actions to ensure enterprise-grade security, high availability, and fast performance of their web applications. A few examples of what you can accomplish with Web Controls, include:<\/p>\n