Java Serialization Filtering - Prevent 0-day Security Vulnerabilities

Опубликовано: 13 Декабрь 2022
на канале: Debug Agent

527

Some of the most common security vulnerabilities are serialization vulnerabilities. As Brian Vermeer said: Java's serialization is the "gift that keeps giving".

This isn't our fault. Serialization is tricky to get right and even the JVM itself has some older code that made dubious serialization choices. But we can harden our code by blocking everything that we don't need. In those situations, even if a new serialization vulnerability is discovered it might not be exploitable on our JVM.

00:00 Introduction
00:24 The gift that keeps giving
00:54 Solutions
01:46 Serialization Filters
02:18 Whitelist vs. Blacklist
03:05 Command Line
04:39 Filter in Code
05:18 Final Word

На этой странице сайта вы можете посмотреть видео онлайн Java Serialization Filtering - Prevent 0-day Security Vulnerabilities длительностью часов минут секунд в хорошем качестве, которое загрузил пользователь Debug Agent 13 Декабрь 2022, поделитесь ссылкой с друзьями и знакомыми, на youtube это видео уже посмотрели 527 раз и оно понравилось 5 зрителям. Приятного просмотра!