Optimize WAS / Web Application Security Reporting
Please optimize WAS reporting in view of readability. Attacks should be readable in Cleartext, and not Attack ID's.
Example Report (Actual Reporting ASG 8.2x):
Attack ID 950907
Should be better reported in a human readable format as for example:
Attack Type:
WEBATTACK/COMMANDINJECTION
Attack:
WASCTC/WASC-31
And optional maybe Informations as a classification or else:
OWASPTOP10/A1 (SQL Injection)
These informations are at least for the modesecurity coreset already in the rule tags.
2
votes
Sascha Paris
shared this idea
