Brian Vermeer

Java Champions & Developer Advocate and Software Engineer for Snyk. Passionate about Java, (Pure) Functional Programming, and Cybersecurity. Co-leading the Virtual JUG, NLJUG and DevSecCon community. Brian is also an Oracle Groundbreaker Ambassador and regular international speaker on mostly Java-related conferences.

1 views

54 articles

350,071 views

Brian Vermeer Nov 23, 2020 3,969 views

Use Query Parameterization to Prevent Injection

Tip: By distinguishing between the SQL code and the parameter data, the query can’t be hijacked by malicious input.

Security

Brian Vermeer Nov 11, 2020 6,240 views

Avoid Java Serialization: The Gift That Keeps On Giving

If you need to Deserialize an inputstream yourself, you should use an ObjectsInputStream with restrictions.

Security

Brian Vermeer Nov 6, 2020 13,129 views

How to Configure Your Java XML Parsers to Prevent XXE Attacks

With XML eXternal Entity (XXE) enabled, it is possible to create a malicious XML, and read the content of an arbitrary file on the machine.

Security

Brian Vermeer Oct 20, 2020 7,048 views

Fixing Vulnerabilities in Maven-Based Projects

In this article, I will explain how you can fix vulnerabilities in third-party libraries when using Maven, even when it is not obvious.

Maven Security

Free eBook: Sustainability for Java Developers
Towards an understanding of sustainable software development, written by and for the friends of OpenJDK
Get it on Leanpub Read more
Your GPU spend is optimized. Your JVM probably isn’t.
Hidden JVM inefficiencies - GC pauses, conservative JIT, slow warm-up - are quietly draining your AI infrastructure's performance and cloud spend. This guide shows how to eliminate that drag and scale with fewer nodes.
Download Now
Sponsored Content
Cut Code Review Time & Bugs in Half. Instantly.
Supercharge your team to ship faster with the most advanced AI code reviews.
Get Started!
Sponsored Content