An application firewall is a form of firewall that controls input, output, and/or access from, to, or by an application or service. It operates by monitoring and potentially blocking the input, output, or system service calls that do not meet the configured policy of the firewall. Application firewalls can be used to protect against malicious activity such as buffer overflows, SQL injection attacks, cross-site scripting, and other application-layer attacks.