Web Intrusion Detection

This document summarizes a talk on web intrusion detection using ModSecurity. The talk discusses the state of web security and intrusion detection, introduces ModSecurity as an open source web application firewall, and discusses how to detect and prevent application attacks. The talk overview includes discussing the problems with web security, different approaches to web intrusion detection including network-based, log-based and web application firewalls, and features of ModSecurity like audit logging and rule-based detection of attacks. The document provides examples of simple and advanced ModSecurity rules.