Java Serialization Filtering - Prevent 0-day Security Vulnerabilities
Some of the most common security vulnerabilities are serialization vulnerabilities. As Brian Vermeer said: Java's serialization is the "gift that keeps giving".
This isn't our fault. Serialization is tricky to get right and even the JVM itself has some older code that made dubious serialization choices. But we can harden our code by blocking everything that we don't need. In those situations, even if a new serialization vulnerability is discovered it might not be exploitable on our JVM.
00:00 Introduction
00:24 The gift that keeps giving
00:54 Solutions
01:46 Serialization Filters
02:18 Whitelist vs. Blacklist
03:05 Command Line
04:39 Filter in Code
05:18 Final Word
En esta página del sitio puede ver el video en línea Java Serialization Filtering - Prevent 0-day Security Vulnerabilities de Duración hora minuto segunda en buena calidad , que subió el usuario Debug Agent 13 diciembre 2022, comparta el enlace con amigos y conocidos, en youtube este video ya ha sido visto 527 veces y le gustó 5 a los espectadores. Disfruta viendo!
