[WEB SECURITY] Positive Security Model

["Lee Sequeira" <leeseq31@xxxxxxxxx>]

------=_Part_12188_16909670.1219866610066
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hi all,
I've been reading about the Positive Security Model for web application
security and had some questions that I was hoping to get answered.  It
sounds great in theory, but does it really work (WAFs or other solutions)?
Does anyone have any (good or bad) experiences with it and can share their
thoughts?  Is it easier to manage then the typical Negative Security Model?


Thanks,
Lee

------=_Part_12188_16909670.1219866610066
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

<div dir="ltr"><p class="MsoNormal"><span style="FONT-SIZE: 10pt; FONT-FAMILY: &#39;Arial&#39;,&#39;sans-serif&#39;">Hi all,</span><span style="FONT-SIZE: 10pt; FONT-FAMILY: &#39;Arial&#39;,&#39;sans-serif&#39;">&nbsp;</span></p>

<div class="MsoNormal"><span style="FONT-SIZE: 10pt; FONT-FAMILY: &#39;Arial&#39;,&#39;sans-serif&#39;">I've been reading about the Positive Security Model for web application security and had some questions that I was hoping to get answered. &nbsp;It sounds great in theory, but does it really work (WAFs or other solutions)?&nbsp; Does anyone have any (good or bad) experiences with it and can share their thoughts?&nbsp; Is it easier to manage then the typical Negative Security Model?&nbsp; </span></div>

<div class="MsoNormal"><span style="FONT-SIZE: 10pt; FONT-FAMILY: &#39;Arial&#39;,&#39;sans-serif&#39;"></span>&nbsp;</div>
<div class="MsoNormal"><span style="FONT-SIZE: 10pt; FONT-FAMILY: &#39;Arial&#39;,&#39;sans-serif&#39;">Thanks,</span></div>
<div class="MsoNormal"><span style="FONT-SIZE: 10pt; FONT-FAMILY: &#39;Arial&#39;,&#39;sans-serif&#39;">Lee</span></div></div>

------=_Part_12188_16909670.1219866610066--