Airlock Gateway 8.1

A normal browser sends the received cookies back to the web server, so every request can easily be associated with the same session or user. But bots are not normal users: many bots simply ignore the session cookies sent by Airlock Gateway. Airlock Gateway 8.1 can also link a session to an IP address instead of a cookie. As a result, the anomaly detection can also identify and block attackers that do not return cookies. This significantly extends the scope of the Anomaly Shield and makes it even harder for bots and other automated attackers to attack a protected website or API.

With the query parameter model, Airlock Anomaly Shield also gets a new sensor that is particularly well suited to prevent credential stuffing or password spraying attacks. In addition, we have further optimized the performance of the anomaly detection, which significantly reduces the system load on very long sessions in particular.

Airlock Gateway supports the two largest NetHSM vendors, Entrust nShield and Thales Luna HSMs. HSMs are useful for additional protection of private keys for HTTPS, among other things. The higher protection is achieved by the fact that the keys generated in the HSM cannot be read via software interfaces. Examples of why this additional security measure is useful are vulnerabilities such as Heartbleed or Shellshock.