diff --git a/getting-started/welcome.md b/getting-started/welcome.md index 02ac76d..14203dd 100644 --- a/getting-started/welcome.md +++ b/getting-started/welcome.md @@ -1,5 +1,5 @@ --- -last_modified_date: 2024-05-31 20:16:38 +last_modified_date: 2024-10-28 17:10:02 layout: default title: Welcome description: Introduction to GatewayD and its key features @@ -54,7 +54,7 @@ GatewayD users are typically developers, DBAs, DBREs, security engineers, compli - **Detect and prevent SQL injection attacks** - The `gatewayd-plugin-sql-ids-ips` is an enterprise plugin that uses a deep-learning model trained with lots of SQL injection attack patterns. It can detect SQL injection attacks and take immediate and preventive actions to stop attackers from compromising your database and your precious data. It differs from WAFs in that it works with database traffic and not just user input, meaning that it has access to the entirety of the query and other messages, thus it can detect and prevent attacks that WAFs can't. + The [`gatewayd-plugin-sql-ids-ips`](/plugins/gatewayd-plugin-sql-ids-ips.md) is an enterprise plugin that uses a deep-learning model trained with lots of SQL injection attack patterns. It can detect SQL injection attacks and take immediate and preventive actions to stop attackers from compromising your database and your precious data. It differs from WAFs in that it works with database traffic and not just user input, meaning that it has access to the entirety of the query and other messages, thus it can detect and prevent attacks that WAFs can't. - **Advanced caching using Write-Ahead-Log** (WIP) diff --git a/plugins/gatewayd-plugin-sql-ids-ips.md b/plugins/gatewayd-plugin-sql-ids-ips.md index 1c15f6b..ff34c7d 100644 --- a/plugins/gatewayd-plugin-sql-ids-ips.md +++ b/plugins/gatewayd-plugin-sql-ids-ips.md @@ -1,5 +1,5 @@ --- -last_modified_date: 2024-10-28 17:07:36 +last_modified_date: 2024-10-28 17:12:08 layout: default title: gatewayd-plugin-sql-ids-ips description: GatewayD plugin for SQL injection detection and prevention. @@ -32,6 +32,10 @@ The `gatewayd-plugin-sql-ids-ips` is a security-focused GatewayD plugin designed - **Logging**: Detailed logs are maintained for each detected injection attempt, including a prediction confidence score. - **Configurable via Environment Variables**: Control plugin behavior and thresholds easily. +## DeepSQLi + +The plugin must be used in conjunction with DeepSQLi, a deep-learning model for SQL injection detection. DeepSQLi is available as a separate service and must be started before the plugin. For more information, refer to the [DeepSQLi documentation](https://github.com/gatewayd-io/DeepSQLi). + ## Installation ### Automatic Installation