The new Anti-Monkey Patching transformation within the Runtime Application Self-Protection (RASP) layer prevents unauthorized runtime modifications (monkey patching) of your application’s functions. This feature is accessible via both the UI and CLI and can be deployed in two configurations:
Automatic Mode: Automatically applies anti-monkey patching protection to all Global and Top-Level functions.
Targeted Mode: Limits protection to specific areas of your codebase, configurable via two methods:
– Code Annotations: Inline annotations placed directly above the code blocks you want to secure.
– Function List: A predefined list specifying the exact names of the Global or Top-Level functions to protect.
Advanced Configuration: When using Automatic Mode, you can use Code Annotations or the Function List to create exceptions. This allows monkey patching on specific, trusted functions where runtime modification is intended by design.
Available countermeasures: Custom Callback, Delete Cookies, Redirect, Real-Time Notifications, Data Exfiltration Prevention, Self-Destruct, and Break Application.