Brian Vermeer
4,585 viewsFix Java Security Issues While Coding in IntelliJ IDEA
Let’s see how we can integrate security and secure development into IntelliJ IDEA using the new Snyk vulnerability scanner plugin!
Brian Vermeer
54 articles
350,071 viewsBrian Vermeer
4,585 views
Brian Vermeer
10,900 views8 Best Practices to Prevent SQL Injection Attacks
SQL injection, when a user adds untrusted data to a database query, is one of the most dangerous vulnerabilities for online applications.
4,799 viewsParticipate in the Java Ecosystem Survey 2021
Just like last year, and together with our partner Azul, we would like your input on how you use Java and the JVM ecosystem.
Brian Vermeer
3,417 viewsSecure Code Review Best Practices (Part 2)
Code reviews are hard to do well. Particularly when you’re not entirely sure about the errors you should be looking for!
Brian Vermeer
5,108 viewsSecure Code Review Best Practices (Part 1)
Code reviews are hard to do well. Particularly when you’re not entirely sure about the errors you should be looking for!
Brian Vermeer
8,842 viewsExplaining Java Deserialization Vulnerabilities (Part 2)
In this part, we continue with even more harmful attacks and show you how you can prevent this in your own code.
Brian Vermeer
8,187 viewsExplaining Java Deserialization Vulnerabilities (Part 1)
Java serialization—and specifically deserialization—is “the gift that keeps on giving” for the security issues produced over the years.
Brian Vermeer
4,288 viewsHacking Java XML Input via External Entity Injection
In this video, I explain and demonstrate how an XXE injection attack works by extracting system data that should not be exposed.
Brian Vermeer
9,598 views5 Tips to Create Secure Docker Images for Java Applications
Naively creating custom Docker images for Java apps comes with security concerns. How do we make security an essential part of Docker …
Brian Vermeer
4,235 viewsMinimizing Security Risks in Application Development
United by their passion for open source, Payara and IBM recently teamed up for a panel discussion on security in Java application …