Web Application Firewalls: A False Sense of Security?

Web Application Firewalls (WAFs) have long been a staple in web security, promoted as essential for blocking malicious attacks. Yet, they often bring inefficiencies, high false positive rates, and are prone to bypasses. This talk explores the philosophy behind WAFs and their limitations in modern security.