Wiki Detay | wiki workcube

Pleven; It is a WAS - Web Application Security - web application security plug-in that works directly within Workcube in the layer architecture that controls the security and system health of businesses using Workcube. Pleven used for filter purposes. It filters requests and attacks from outside and inside. A standard is determined for the filtering process and a security layer is created in accordance with this standard.

Path: Control Panel > System > Dev Tools > Plevne

Plevne Dashboard

Total request blocking: This field blocked requests shows the number. Request blocking means that a user is prevented from attacking the site with malicious codes or exploid texts within the system.
Critical File Blocking: This field shows blocked file activities. It shows the number of times the codes in the files being executed or uploaded are blocked.
Attention: Apart from these two issues, errors etc. It shows warnings and incorrect login attempts that may occur for various reasons.
CPU Loads:It shows the processor load rate.
Memory Used: Used ram value information is displayed.
Active Threads: It gives the number of running processes. A special installation is required to see this information.
The log block gives the last 20 findings records of the 3 headings in the upper section (total request blocking, critical file blocking and warnings)

Plevne Process Classification

Which processes will run in this area and at what security levels? is determined. Each Workcube Object (WO) is added to the system with a predefined security level. The minimum security level is Light and the most stringent security level is Dark. Possible interference is prevented by increasing the level in areas that can be used publicly in the system or in WOs that are authorized to a wide range of users. It can be navigated from the Dashboard screen or via the following path.

Path: Control Panel System > General Settings > Pleven Process Classification

Expression Category

Expressions are expressions used to recognize scripts or exploids to be made to the system. These are used to recognize certain operations, such as antivirus definitions.

Expressions work on a category basis, for example, if expression definitions are to be made for the search field, they are defined and managed in a category.

On the Expression Category screen, existing categories are displayed and can be edited and added. It is possible to access the expression definitions within an expression category by clicking on its name. This screen contains the expression definition list.

For example: It has been stated that operations containing the word script will be blocked. Commands in Regular Expression standards

[ 160]

Code Category (Interceptor Category)

Interceptors are pattern structures that must be executed with codes that are too complex to be resolved with expression. These patterns; They work by examining incoming requests or files.

For example;In file upload operations, we create categories for a series of operations. Transactions are managed according to categories, they enable sequential transactions to run.

Periodical Application Management

When adding a new interceptor, the file path is added to ensure that this file is called when the category is processed. It protects the system by checking file requests before they enter the system. In addition, some interceptors protect the system in any case, these ensure basic security.

Path: System > System Administration > General Settings > Periodical Application Management

Pleven Logs

This is the area where transaction records are kept. Records are classified and displayed according to transaction type and type.

Path: System > System Management > General Settings > Log Records

Plevne Settings

There are two important settings in Plevne. These are;

Is Pleven active? When this setting is turned off, any configurations made will become invalid. However, basic security cannot be disabled.
Is MFA active? It is checked whether multi factor authentication is active or not.

IAM

Plevne works in integration with user authorizations and performs strict checks on authorization checks.

Path: System > System Administration > General Settings > IAM

Plevne Errors and Warnings

Plevne WAS Here
All warnings under this heading are explained. However, these warnings generally appear during a danger that could harm the system.

If you encounter such an error, first make sure whether there are SQL, script or HTML-based codes in the data you send. This data can be included both in the forms and in the URL. This error is also encountered when the standard URL format is corrupted (possibly intentional). Check the data you sent by following the list below.

Are fuseaction or event values outside of standard formats?
The data in the URL field contains SQL misleading (For example, 1 = 1), script (For example,
If the request came from a form page, there are SQL misleading, script or HTML based values in the form fields.

If you encounter these values, please close the window and access the system by manually entering the address again. If you think that any of these data should be in the url or forms, please contact your system administrator.

Login Screen Errors

Login Token note found
If you are getting this error, the security key was not found on the login information page. This usually happens when you try to log in quickly. When you encounter such an error, try to log in again by closing the window and entering the url manually.
Username is mistake
If you are getting this error, the username you are trying to enter is a numeric, character or a value other than underscore, dot and @ symbol. If you think you have a username with such a character, please contact your system administrator.
If you receive this error, the data on the login page may not be available to the application. You may also receive this error in systematic problems. This error means that the application cannot read or process the input values. In such a case, it means that no one can access the system. Report it.
Dangerous content found
If you are receiving this error, there are values in the data on the login page that correspond to misleading SQL, script or HTML-based codes. If your password contains these values, contact your system administrator to change your password.

Pleven. Functions

It examines the requests coming to the system through request filters and stops the requests deemed harmful.
It examines the file, cookie, harmful input content on the incoming request and stops the request based on the potentially harmful data in these contents.
Since it works on a policy basis, it operates in Strict-Normal-Light modes according to Workcube Objects. It works.
It is dynamic, filters can be updated or added.
It is centralized, it provides precautions against current attacks by taking the filters from the central database.
It checks the codes that will create security vulnerabilities during the development, testing and go-live processes.
By following the traces, system slowdowns and developments that may be problematic and strain the system.
It produces information about system health by checking various system resources by communicating with Tomcat and the CF layer.
It produces analysis results by performing tests for possible vulnerabilities in the system according to OWASP standards.

?

?

?

Name*

Nachname*

E-Mail *

Über Workcube-Objekte

Pleven Prozessklassifizierung
Es wird zur Klassifizierung von Transaktionen verwendet, indem bestimmt wird, welche Transaktionen auf welchen Sicherheitsstufen ausgeführt werden.

Type: WBO Version: Holistic v1 Licence: Add-On Author: Plevne

Verwandte Inhalte

22.3.2. Pleven 2-Schritt-Verifizierung

Sie können die Zugangskontrolle sicherer gestalten, indem Sie mit Pleven eine zweistufige Verifizierung durchführen.

Fortsetzung