WAPP: Safe Learning of Positive Security WAF Policies from Live Traffic
This paper presents the Whitelisting Autonomous Policy Producer (WAPP), a framework that combines trust filtering, deterministic rule synthesis, confidence scoring, and validation before enforcement that blocks confirmed CRS bypasses on constrained fields, while free text inputs remain a precision challenge that requir...