Fundamentals of Secure Software - RASP (Runtime Application Self-Protection)

The video tutorial discusses Runtime Application Security Protection (RASP), a technology that enhances software security by monitoring inputs and blocking potential attacks in the runtime environment. RASP can take actions like terminating user sessions or alerting security personnel. It can be configured to block or monitor traffic, similar to DAS and IAST. However, RASP requires real-time attack detection and may accidentally block legitimate traffic. Ownership of protection rules can cause organizational confusion. Examples of RASP tools include Imperva and Wall Arm.

What are the potential weaknesses of RASP mentioned in the text?

Why is it important for someone or a group to own the rules that define what is blocked by RASP?