How to Use AWS WAF to Secure WordPress Login
WordPress is the most popular blogging tool on the internet accounting for approximately 25% of all sites. One of the biggest threats to WordPress is brute force cracking attempts on the login page (wp-login.php) and admin (wp-admin/*) pages. There are various methods of protecting these pages including utilising WordPress plugins or applying security controls at the webserver (ie within apache/nginx for example). The problem with these methods is they are utilizing server resources meaning that potentially a hacker could cause a denial of service (DOS) through their brute force attempts.

In this article, I am going to describe how to protect the WordPress login page using AWS Web Application Firewall (WAF). The advantage of using a WAF for protection is that the security safeguards are completely abstracted from the webserver(s) and instead placed at the point of entry into the application…

READ THE COMPLETE ARTICLE BY CLICKING HERE
['Rahul Biswas']
['Security', 'Waf', 'AWS', 'Firewall', 'WordPress']