Cookie poisoning is the term applied when attackers manipulate or “poison” an otherwise valid cookie sent back to a server. The altered or “hacked” cookie can be used to bypass user security mechanisms on the server and glean personal information for such purposes as identity or trade theft.

Asymmetric deployment refers to a configuration where a device is placed in a single location, usually the data center. With a symmetric configuration, devices are placed at both ends of the WAN, for example at the data center (the central location) and at one or more remote locations. Asymmetric deployment offers the best return on […]

Bandwidth is a measure of the data capacity of a network connection, representing how quickly data can be sent from one point to another. Despite being cheap and often plentiful, additional bandwidth delivers diminishing returns as a solution to network and application performance problems. The optimization of data and the use of technologies such as WAN […]

Bot management is the practice of knowing how bots impact your business and understanding their intent, so you can respond appropriately to all incoming bot activity. Not all bots are “bad”, after all. The “good” bots are the ones we rely on—for example, search bots that help customers find what you’re looking for on the […]

TL;DR: Half of all internet traffic comes from bots, both good and bad. It’s important to manage bot traffic.

A buffer overflow occurs when a program or process tries to store more data in a temporary data storage area (a buffer) than it was designed to contain. The result is that the extra information “overflows” into adjacent buffers, which can corrupt or overwrite the valid data held in those locations.

Cross-site scripting (XSS or CSS) is a Web application attack used to gain access to private information by delivering malicious code to end-users via trusted Web sites. Typically, this type of attack is successful due to a Web application’s lack of user input validation, allowing users to supply application code in HTML forms instead of […]

Advanced security devices use application intelligence. Products with this capability understand the correct flow of application data, and they recognize and reject traffic that might indicate a threat to the application or to its host system.