Detecting zero-days before zero-day
Talk given on 2023-09-29
In this research/presentation I share the high level concepts that make Cloudflare’s WAF the best on the market, especially when it comes to detecting novel attack vectors.
I initially published this as a presentation I prepared for Black Hat USA 2023. I was, however, also able to write a blog post on Cloudflare’s site (link below) and can also share the original slides (also below).
As usual, for all Cloudflare related content, it was prepared for Cloudflare and all credit goes to the company. The presentation does include technical details which I simply formatted for a wider audience but for which I was not the author. I can, however, personally claim the overall concept/idea!