Company
Date Published
Author
Christophe Papazian, Gillian McGarvey
Word count
1231
Language
English
Hacker News points
None

Summary

Datadog has introduced Exploit Prevention, a new security feature in its Application Security Management (ASM) that uses runtime application self-protection (RASP) to protect systems from runtime threats before code execution. This feature analyzes the input/output entry points in an application's code and uses request data as context to determine if vulnerabilities are being exploited. It can detect and block attacks targeting vulnerabilities such as local file inclusion, server-side request forgery, SQL injection, and command injection, providing deep visibility into application behavior and blocking malicious requests before they can be executed. Exploit Prevention is integrated with Datadog's In-App web application firewall (WAF) and monitoring tools, enabling organizations to analyze clusters of attacks, correlate them with specific endpoints in their application, and provide business logic security rules and recommendations. The feature is available in .NET, Go, Java, NodeJS, and Python tracers for all Datadog customers using ASM, and can be deployed and enabled through the company's documentation.