ASE attack detection
API Security Enforcer supports real time ASE attack detection and blocking for API Deception. ASE blocks hackers who probe a decoy API (see API Deception Environment) and later try to access a real business API.
Enable ASE detected attacks
Enable real-time ASE attack detection by running the following ASE command:
/opt/pingidentity/ase/bin/cli.sh -u admin -p admin enable_ase_detected_attack
ASE detected attack is now enabled.
Disable ASE detected attacks
Disable real-time ASE detected attacks by running the following command on the ASE command line:
/opt/pingidentity/ase/bin/cli.sh -u admin -p admin disable_ase_detected_attack ASE detected attack is now disabled
When you disable ASE detected attacks, the attacks are deleted from the deny list. |