Webriel: Rules Writing Workshop
Overview
This two-day class provides an in-depth look at Webriel rules and Webriel rules language syntax. Learning how to take advantage of the power behind Webriel rules can help web security administrators write and configure highly effective rules. This class features extensive hands-on rules development and testing to reinforce the theoretical concepts that are presented.
Target Audience:
Web Server Administrators, Security Consultants and others that are responsible for web application security in their organizations.
Prerequisites:
In order to gain the most value from the course, students should be familiar with Perl Compatible Regular Expressions (PCRE). This course assumes that students have a technical understanding of the HTTP protocol. Proficiency with Linux and UNIX text editing tools (vi editor) is suggested, not required.
Course Outline:
- Introduction to Webriel Rule Language.
- Anatomy of a Webriel rule.
- Overview of PCRE.
- Variables.
- Transformation functions.
- Actions.
- Using advanced rule syntax with the “chain” action.
- Overview of the Core Rule set.
- Creating custom rules.
- Virtual Patching.
- Using initcol and setsid for stateful rules.
- Good rule writing practices.
- Testing, tuning rules.
- Rule Debugging.
- Rule management.
