{"id":"https://openalex.org/W2320141756","doi":"https://doi.org/10.17323/1998-0663.2015.4.71.78","title":"Securing information resources using web application firewalls","display_name":"Securing information resources using web application firewalls","publication_year":2015,"publication_date":"2015-12-31","ids":{"openalex":"https://openalex.org/W2320141756","doi":"https://doi.org/10.17323/1998-0663.2015.4.71.78","mag":"2320141756"},"language":"en","primary_location":{"id":"doi:10.17323/1998-0663.2015.4.71.78","doi":"https://doi.org/10.17323/1998-0663.2015.4.71.78","is_oa":true,"landing_page_url":"https://doi.org/10.17323/1998-0663.2015.4.71.78","pdf_url":"https://bijournal.hse.ru/data/2016/03/18/1127231429/9.pdf","source":{"id":"https://openalex.org/S4306538308","display_name":"\u0411\u0438\u0437\u043d\u0435\u0441-\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0442\u0438\u043a\u0430","issn_l":"1998-0663","issn":["1998-0663","2587-814X","2587-8158","2587-8166"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":["poland-20","russia-white-list-2"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Business Informatics","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://bijournal.hse.ru/data/2016/03/18/1127231429/9.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Petr Baranov","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I118501908","display_name":"National Research University Higher School of Economics","ror":"https://ror.org/055f7t516","country_code":"RU","type":"education","lineage":["https://openalex.org/I118501908"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Petr Baranov","raw_affiliation_strings":["Associate Professor, Department of Innovations and Business in IT , National Research University Higher School of Economics Address: 20 , Myasnitskaya Street , Moscow , 101000 , Russian Federation","Department of Innovations and Business in IT, National Research University Higher School of Economics Address: 20, Myasnitskaya Street, Moscow, 101000, Russian Federation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Associate Professor, Department of Innovations and Business in IT , National Research University Higher School of Economics Address: 20 , Myasnitskaya Street , Moscow , 101000 , Russian Federation","institution_ids":["https://openalex.org/I118501908"]},{"raw_affiliation_string":"Department of Innovations and Business in IT, National Research University Higher School of Economics Address: 20, Myasnitskaya Street, Moscow, 101000, Russian Federation","institution_ids":["https://openalex.org/I118501908"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5052846575","display_name":"Beybutov E.R.","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I118501908","display_name":"National Research University Higher School of Economics","ror":"https://ror.org/055f7t516","country_code":"RU","type":"education","lineage":["https://openalex.org/I118501908"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Eldar Beybutov","raw_affiliation_strings":["MSc Program Student, Faculty of Business and Management, National Research University Higher School of Economics Address: 20, Myasnitskaya Street, Moscow, 101000, Russian Federation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MSc Program Student, Faculty of Business and Management, National Research University Higher School of Economics Address: 20, Myasnitskaya Street, Moscow, 101000, Russian Federation","institution_ids":["https://openalex.org/I118501908"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I118501908"],"apc_list":null,"apc_paid":null,"fwci":0.896,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.86615259,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"2015","issue":"4","first_page":"71","last_page":"78"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.004900000058114529,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/web-application-firewall","display_name":"web application firewall","score":1.0},{"id":"https://openalex.org/keywords/web-application-security","display_name":"web application security","score":0.9179999828338623},{"id":"https://openalex.org/keywords/intrusion-prevention","display_name":"intrusion prevention","score":0.8640000224113464},{"id":"https://openalex.org/keywords/application-layer-security","display_name":"application layer security","score":0.6549999713897705},{"id":"https://openalex.org/keywords/denial-of-service-prevention","display_name":"denial of service prevention","score":0.7059999704360962},{"id":"https://openalex.org/keywords/web-application-servers","display_name":"web application servers","score":0.4690000116825104},{"id":"https://openalex.org/keywords/information-security","display_name":"information security","score":0.460999995470047}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6330162286758423},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5669862627983093},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5543976426124573},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.5289732813835144},{"id":"https://openalex.org/C2777672014","wikidata":"https://www.wikidata.org/wiki/Q1172573","display_name":"Web traffic","level":3,"score":0.4632417559623718},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.4290595054626465},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.4264088273048401},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.3352465033531189},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.31886905431747437},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.305772066116333}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.17323/1998-0663.2015.4.71.78","doi":"https://doi.org/10.17323/1998-0663.2015.4.71.78","is_oa":true,"landing_page_url":"https://doi.org/10.17323/1998-0663.2015.4.71.78","pdf_url":"https://bijournal.hse.ru/data/2016/03/18/1127231429/9.pdf","source":{"id":"https://openalex.org/S4306538308","display_name":"\u0411\u0438\u0437\u043d\u0435\u0441-\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0442\u0438\u043a\u0430","issn_l":"1998-0663","issn":["1998-0663","2587-814X","2587-8158","2587-8166"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":["poland-20","russia-white-list-2"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Business Informatics","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.17323/1998-0663.2015.4.71.78","doi":"https://doi.org/10.17323/1998-0663.2015.4.71.78","is_oa":true,"landing_page_url":"https://doi.org/10.17323/1998-0663.2015.4.71.78","pdf_url":"https://bijournal.hse.ru/data/2016/03/18/1127231429/9.pdf","source":{"id":"https://openalex.org/S4306538308","display_name":"\u0411\u0438\u0437\u043d\u0435\u0441-\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0442\u0438\u043a\u0430","issn_l":"1998-0663","issn":["1998-0663","2587-814X","2587-8158","2587-8166"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":["poland-20","russia-white-list-2"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Business Informatics","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2320141756.pdf","grobid_xml":"https://content.openalex.org/works/W2320141756.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2605588153","https://openalex.org/W3158364323","https://openalex.org/W2766518466","https://openalex.org/W7098393486","https://openalex.org/W4206711912","https://openalex.org/W7038582271","https://openalex.org/W4404037992","https://openalex.org/W2374530206","https://openalex.org/W3116973364","https://openalex.org/W7016193363"],"abstract_inverted_index":{"Petr":[0],"A.":[1],"Baranov":[2],"-":[3,32,76],"Associate":[4],"Professor,":[5],"Department":[6],"of":[7,18,37,46,63,89,105,133,149,176,190,215,279,288],"Innovations":[8],"and":[9,39,86,153,165,179,208,219,227,293,303,314],"Business":[10,38],"in":[11],"IT,":[12],"National":[13,41],"Research":[14,42],"University":[15,43],"Higher":[16,44],"School":[17,45],"Economics":[19,47],"Address:":[20,48],"20,":[21,49],"Myasnitskaya":[22,50],"Street,":[23,51],"Moscow,":[24,52],"101000,":[25,53],"Russian":[26,54],"Federation.":[27,55],"E-mail:":[28,56],"pbaranov@hse.ruEldar":[29],"R.":[30],"Beybutov":[31],"MSc":[33],"Program":[34],"Student,":[35],"Faculty":[36],"Management,":[40],"eldar.beybutov@gmail.com":[57],"This":[58,271],"paper":[59],"provides":[60],"an":[61],"overview":[62],"core":[64],"technologies":[65],"implemented":[66],"by":[67,310],"comparably":[68],"new":[69,131],"products":[70],"on":[71,275],"the":[72,109,145,150,161,250,266,285],"information":[73,97,110,123,134],"security":[74,135,246,256,267,286],"market":[75,311],"web":[77,128,169,182,251,281,318],"application":[78,141,170,183,252,282,319],"firewalls.":[79],"Web":[80,140],"applications":[81],"are":[82,185],"a":[83,130,156,167],"very":[84],"widely-used":[85],"convenient":[87],"way":[88],"presenting":[90],"remote":[91],"users":[92],"with":[93,187,235,258,306],"access":[94,119],"to":[95,113,121,127,164,225,231,260,264],"corporate":[96],"resources.":[98],"They":[99],"can,":[100],"however,":[101],"become":[102],"single":[103],"point":[104],"failure":[106],"rendering":[107],"all":[108,160],"infrastructure":[111],"inaccessible":[112],"legitimate":[114],"clients.":[115],"To":[116,172],"prevent":[117],"malicious":[118],"attempts":[120],"endpoint":[122],"resources":[124],"and,":[125,248],"intermediately,":[126],"servers,":[129],"class":[132],"solutions":[136],"has":[137,243],"been":[138],"created.":[139],"firewalls":[142,184,283],"function":[143],"at":[144],"highest,":[146],"seventh":[147],"layer":[148],"ISO/OSI":[151],"model":[152],"serve":[154],"as":[155,213],"controlling":[157],"tunnel":[158],"for":[159],"traffic":[162,177,205],"heading":[163],"from":[166,316],"company\u2019s":[168],"server(s).":[171],"ensure":[173],"decent":[174],"levels":[175],"monitoring":[178],"intrusion":[180],"prevention,":[181],"equipped":[186],"various":[188,289],"mechanisms":[189,197,302],"data":[191],"exchange":[192],"session":[193],"\u201cnormality\u201d":[194],"control.":[195],"These":[196],"include":[198],"protocol":[199],"check":[200],"routines,":[201],"machine":[202],"learning":[203],"techniques,":[204],"signature":[206],"analysis":[207],"more":[209,269],"dedicated":[210],"means,":[211],"such":[212],"denial":[214],"service,":[216],"XSS":[217],"injection":[218],"CRRF":[220],"attack":[221],"prevention.":[222],"The":[223],"ability":[224],"research":[226,272,298],"add":[228],"user":[229],"rules":[230,263],"be":[232],"processed":[233],"along":[234],"vendor-provided":[236],"ones":[237],"is":[238,273],"important,":[239],"since":[240],"every":[241],"company":[242],"its":[244,262],"own":[245],"policy":[247,268],"therefore,":[249],"firewall":[253,320],"should":[254],"provide":[255],"engineers":[257],"ways":[259],"tweak":[261],"reflect":[265],"precisely.":[270],"based":[274],"broad":[276],"practical":[277],"experience":[278],"integrating":[280],"into":[284,299],"landscape":[287],"organizations,":[290],"their":[291,304],"administration":[292],"customization.":[294],"We":[295],"illustrate":[296],"our":[297],"available":[300],"filtering":[301],"implementations":[305],"exemplary":[307],"product":[308],"features":[309],"leaders,":[312],"diagrams":[313],"screenshots":[315],"real":[317],"systems.":[321]},"counts_by_year":[{"year":2019,"cited_by_count":2},{"year":2017,"cited_by_count":1}],"updated_date":"2026-10-30T12:39:25.321706","created_date":"2016-06-24T00:00:00"}
