Re: Announcement: Releasing CORE GRASP for PHP. An open source, dynamic web application protection system.
| From: | Colin Guthrie | Date: | Wed, 22 Aug 2007 18:02:59 +0000 |
| Subject: | Re: Announcement: Releasing CORE GRASP for PHP. An open source, dynamic web application protection system. | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-261124@lists.php.net to get a copy of this message | ||
Ezequiel Gutesman wrote:
> CORE GRASP for PHP is a web-application protection software aimed at
> detecting and blocking injection vulnerabilities and privacy violations.
> As mentioned during its presentation at Black Hat USA 2007, GRASP is
> being released as open source under the Apache 2.0 license and can be
> obtained from http://gasp.coresecurity.com/.
Sounds interesting.
I thing a good FAQ entry would be how this patch fits in with Suhosin
and what are the comparable/conflicting concepts, are they compatible
with each other etc.
http://www.hardened-php.net/suhosin/a_feature_list.html
Both systems are liable to appeal to the same sort of people so it makes
sense to cover this.
Cheers
Col