Cyberoam web application firewall secures websites and web-based applications against web application manipulation attacks. It follows the positive protection model based on its intuitive website flow detector. The web application firewall protects the web applications from SQL injections, URL parameter tempering, session hijacking, cross-site scripting and buffer over flows attacks.