Erik Costlow
4,740 viewsThe SolarWinds Hack for Java Developers
For Java developers and architects who design, build, and run applications, there are two core take-aways to the SolarWinds hack...
Category
Security
Erik Costlow
4,740 views
Michal Trojanowski
9,746 viewsOIDC Client with Mutual TLS Client Authentication
Learn how to set up an OpenID Connect (OIDC) client with Spring Security using mutual TLS as a method for authenticating the client.
Sven Ruppert
3,825 viewsQuick Security Wins and Getting Started with DevSecOps
What are the quick wins or low hanging fruits if you want to deal more with the topic of security in software development?
Brian Vermeer
8,842 viewsExplaining Java Deserialization Vulnerabilities (Part 2)
In this part, we continue with even more harmful attacks and show you how you can prevent this in your own code.
Kevin Farnham
4,568 viewsA Compendium of 2021 Java & OpenJDK Predictions
Now that 2021 is well underway, many prominent Java developers have taken the time to predict what 2021 may bring to the Java universe!
Brian Vermeer
8,187 viewsExplaining Java Deserialization Vulnerabilities (Part 1)
Java serialization—and specifically deserialization—is “the gift that keeps on giving” for the security issues produced over the years.
Brian Vermeer
4,288 viewsHacking Java XML Input via External Entity Injection
In this video, I explain and demonstrate how an XXE injection attack works by extracting system data that should not be exposed.
Benjamin Muskalla
3,566 viewsLet's Do Some Java Syntax Puzzlers Today
Given I love a good puzzle (especially the Java Puzzles), let’s try some puzzles, using the Java syntax only, without any runtime behavior.
Brian Vermeer
9,598 views5 Tips to Create Secure Docker Images for Java Applications
Naively creating custom Docker images for Java apps comes with security concerns. How do we make security an essential part of Docker …
Brian Vermeer
4,235 viewsMinimizing Security Risks in Application Development
United by their passion for open source, Payara and IBM recently teamed up for a panel discussion on security in Java application …