JAF was developed from the ground up with the primary goal of providing protection for Web applications against hacker attacks and worms at the application level. JAF monitors the incoming and outgoing HTTP traffic to do this. Depending on the configuration, JAF – as a Web Application IDS – can detect and log attacks or – as a “second line of defence” – can filter out these attacks or unwanted data in order to protect against known and unknown weak points in Web applications. An intuitive web-based user interface permits the easy definition and administration of the various security functions; from basic protection through to a highly detailed full-protection mode. JAF offers central monitoring and reporting including real-time statistics.