Introducing SAST, DAST, IAST and RASP
In this article, we're going to look at the differences between the various cybersecurity defence techniques!
Category
Security
Getting Started with Snyk for Secure Java Development
Learn how to begin with Snyk for secure Java development so that you too can be more secure from the get-go!
CVSS 101: First Steps with Common Vulnerability Scoring System
What is the Common Vulnerability Scoring System (CVSS), who is behind it, what are we doing with it, and what does a CVSS Value means for …
About The Lifecycle of a Security Vulnerability
In this article, you'll learn that we have little influence on almost all stages of the typical lifecycle of an IT security vulnerability!
Learn All About Java Encryption and Hashing
What is a strong encryption algorithm today, might be a weak algorithm a year from now. Therefore, encryption needs to be reviewed …
JEP 411: Java's Security Model and the Principle of Least Privilege
Java, like most platforms or languages has layers of security, this article lookS at the Authorization layer and how JEP 411 relates to it.
Getting Started Hacking Third-Party APIs on the JVM
Some alternatives that allow you to make third-party APIs behave in a way that their designers didn't intend to!
Why JEP 411 Will Have a Negative Impact on Java Security
SecurityManager, foundation to build secure software, on its own is insufficient to limit users & software to the least privilege principle.
Sanitize All Input! Sanitize All Input! Sanitize All Input!
Cross-site scripting (XSS) is a well-known issue and mostly utilized in JavaScript applications. However, Java is not immune to this!
Preventing YAML Parsing Vulnerabilities in Java
With anchors, you can create a YAML bomb! The tremendous amount of (nested) objects will cause a memory overload.