diff --git a/README.md b/README.md index ee90227..01c4cd8 100644 --- a/README.md +++ b/README.md @@ -4,13 +4,20 @@ A curated list of awesome links related to application/API security in NGINX env ## Talks -- [Building a Security Shield for Your Applications with NGINX & Wallarm (nginx.conf 2017). Transcript](https://www.nginx.com/blog/build-application-security-shield-with-nginx-wallarm) +(https://www.nginx.com/blog/build-application-security-shield-with-nginx-wallarm) - [Behavior Based Security with Repsheet: Aaron Bedra @nginxconf 2014 (video)](https://www.youtube.com/watch?v=9AyaVxzqYoA) ## Articles +- [Building a Security Shield for Your Applications with NGINX & Wallarm. - [Let's Encrypt & Nginx](https://letsecure.me/secure-web-deployment-with-lets-encrypt-and-nginx/) - [Installing the Nginx Plus with mod_security WAF](https://www.nginx.com/resources/admin-guide/nginx-plus-modsecurity-waf-installation-logging/) +- [CloudFlare's new WAF: compiling to Lua](https://blog.cloudflare.com/cloudflares-new-waf-compiling-to-lua/) + + +## Configuration + +- [gixy](https://github.com/yandex/gixy/) - a tool to analyze Nginx configuration to prevent security misconfiguration ## WAF (Web Application Firewalls) for nginx @@ -19,4 +26,10 @@ A curated list of awesome links related to application/API security in NGINX env - [wallarm](https://wallarm.com) - NG-WAF for NGINX with security rules adjusted with AI ## Bot mitigation / Anti-scrapping / Account taked-over prevention + - [testcookie-nginx-module](https://github.com/kyprizel/testcookie-nginx-module) - Simple robot mitigation module using cookie based challenge/response technique + +## NGINX forks + +- [SEnginx](https://github.com/NeusoftSecurity/SEnginx) - Security-Enhanced nginx +- [lua-resty-waf](https://github.com/p0pr0ck5/lua-resty-waf) - High-performance WAF built on the OpenResty stack