1. Double Firewall system providing Three Layers of protection:
Layer 1: Signature-based Detection System - detecting most common hacking behaviours.
a) Surface Scanning, once hacking behaviour is found, the activity and corresponding IP will be banned immediately.
Layer 2: Pattern-based Instruction Detection Systems - blocking all inbound malicious codes and hacking activities, including network-, application-, and operating system-level attacks.
a) Scans and monitors all URL, Form Fields, Cookies values.
b) If hacking is found and the Risk Score exceed the secure level, the IP will be banned immediately.
c) If Suspicious Hacking behaviour is found for Form Fields and Cookies hacking, the hacking strings in the Form / Cookies value will be stripped and sanitized.
Layer 3: HTTP BlackList System - dynamically linking to a HTTP blacklist database and blocking access based on network masks or IP addresses.
a) Scans users' IPs, once the IP address is located in the HTTP blacklist, the access will be blocked immediately.
2. Two Types of reactions:
a) Ban + Email Alert: If the hacking triggers Layer 1 protection or exceed the Risk Score in Layer 2 protection, the IP will be blocked, and the alert email will be sent to the administrator.
b) Log + Email Alert: If the Risk Score of the suspicious behaviour is lower than the global setting, the IP will be blocked for monitoring purpose, and the alert email will be sent to the administrator.
3. Form Field Filtering Enabled - allowing users to filter the content of the form fields in order to prevent XSS attacks.
4. Whitelist Setting Enabled – Unlike other security software which only provides IP whitelist function, OSE PHP Anti-Hacker also provides the whitelist function for your programs and form fields, so that it gives you the flexibility to user a wide range of software while maintaining a high level of protections.
5. Supports for Search Engine Optimized Websites – providing protection while maintaining your page ranking.
6. Instant emails alerts to administrators once suspicious hacking behavior is logged.
7. The application is developed under an Open Source PHP basis using the Model-View-Control Architect. Therefore its functions can be easily extended to other Open Source PHP systems.