A tool for testing if Web application firewalls are vulnerable to around 150 protocol-level evasion techniques was released at the Black Hat USA 2010 security conference. The tool and research that went into its creation are the work of Ivan Ristic, the original author of the popular ModSecurity Web application firewall. Ristic hopes to kick start a discussion in the industry about the evasion techniques. A wiki has also been set up with the purpose of building a freely available catalogue of WAF evasion techniques, Ristic said.”]