Multi-Layered Security Of Web Applications In Cloud Environments Using WAF, Zero Trust, AI-Driven Threat Detection, And RASP

Contemporary web applications, despite their increasing functional sophistication, remain highly vulnerable to numerous security threats. Undoubtedly, the most prevalent threats to web applications include SQL Injection (SQLi), Cross-Site Scripting (XSS), and Remote Code Execution (RCE). Traditional approaches to securing applications and their environments have proven insufficient in mitigating these risks effectively. The objective of this publication is to implement a multi-layered security model in the cloud, leveraging a Web Application Firewall (WAF), the Zero Trust concept, Artificial Intelligence (AI), and Runtime Application Self-Protection (RASP). This study created an environment with a strong focus on network security, application security, monitoring, and incident response. State-of-the-art cloud security technologies such as Microsoft Defender for Cloud, Sentinel, WAF, and RASP were deployed, and their effectiveness was evaluated through simulated attacks on a vulnerable application. The results demonstrate that such a comprehensive approach to web application security significantly enhances protection levels in cloud environments.