Java Serialization Filtering - Prevent 0-day Security Vulnerabilities
Some of the most common security vulnerabilities are serialization vulnerabilities. As Brian Vermeer said: Java's serialization is the "gift that keeps giving".
This isn't our fault. Serialization is tricky to get right and even the JVM itself has some older code that made dubious serialization choices. But we can harden our code by blocking everything that we don't need. In those situations, even if a new serialization vulnerability is discovered it might not be exploitable on our JVM.
00:00 Introduction
00:24 The gift that keeps giving
00:54 Solutions
01:46 Serialization Filters
02:18 Whitelist vs. Blacklist
03:05 Command Line
04:39 Filter in Code
05:18 Final Word
Nesta página do site você pode assistir ao vídeo on-line Java Serialization Filtering - Prevent 0-day Security Vulnerabilities duração hora minuto segundo em boa qualidade , que foi baixado pelo usuário Debug Agent 13 Dezembro 2022, compartilhe o link com seus amigos e conhecidos, no youtube este vídeo já foi visto 527 vezes e gostou 5 espectadores. Boa visualização!
