Re: [tool] Guardian () JUMPERZ NET : Detecting session hijack

[Ivan Ristic <ivanr () webkreator com>]

Ivan Ristic wrote:
> I decided we needed a single rule definition format, something
> that would be supported by commercial and open source applications
> equally. This is how the portable web application firewall format
> came to life:

  I just realized this is not entirely true. Although I did
  design the portable web application format, the idea did not
  originate with me. It was Mark Curphey who approached me
  in late 2003 (IIRC) to invite me to participate in the
  OASIS Web Application Security Technical Committee. The goal
  was to create portable formats for vulnerability definition,
  automated detection, and automated protection. So I just did
  what was in the charter of the committee already.

--
Ivan Ristic (http://www.modsecurity.org)