Comparison of Mod-Evasive and Modsecurity Modules for Apache Web Server in Lamp Environment

One of the most widely used technologies for delivering information and services over the Internet is the website, which can update and maintain web applications without requiring software installation on potentially millions of client computers. Due to their growing use for vital services, web apps are becoming a visible and significant target for security breaches. Strong security measures are required to enhance the security of web applications. This research aims to merge two powerful Apache modules, namely ModSecurity and ModEvasive, to im- prove the safety of applications that are used online. The thesis provides a detailed explanation of each module's capabilities, features, and benefits. It gives a combined deployment strategy that will maximize the synergistic potential of each module. Ac- cording to the research findings, the combined use of ModEvasive and ModSecurity modules enhances website security, and many critical and high-severity vulnerabilities can be eliminated with the combined use of both Apache modules. This research also reveals the most common website vulnerabilities and highlights the use of Detectify for assessing website security.