Virtual patching

Adding rules to a WAF, IPS or similar layer in front of a vulnerable system to detect and block attacks on a known vulnerability, without changing the vulnerable code. It buys time when no vendor fix exists yet or the system cannot be taken down to update. The vulnerability is still there and rules can be bypassed, so the real fix must still follow.

Further reading: cheatsheetseries.owasp.org

All terms