Difference between revisions of "Category:Java"

From OWASP
Jump to: navigation, search
 
Line 21: Line 21:
 
Mechanisms like input validation, encoding
 
Mechanisms like input validation, encoding
 
Common vulnerabilities like...
 
Common vulnerabilities like...
 +
 +
[[Category:Platform]]

Revision as of 06:00, 4 April 2006

While Java and J2EE contain many security technologies, it is not easy to produce an application without security vulnerabilities. Most application security Vulnerabilities apply to Java applications just like other environments. The notable exception is buffer overflow and related issues that do not apply to Java applications.

Contents

Securing the Java Environment

Verifier and Sandbox JRE vs. JDK (precompile JSPs)


Securing Java Application Code

Common vulnerabilities like...Runtime.exec, Statement, readline() Dangers of native code, dynamic code, and reflection Tools like PMD and FindBugs Security mechanisms like logging, encryption, error handling

Securing the J2EE Environment

Minimize attack surface in web.xml Configure error handlers

Securing J2EE Application Code

Vulnerabilities like... Using J2EE filters for protection Mechanisms like input validation, encoding Common vulnerabilities like...

Subcategories

This category has the following 3 subcategories, out of 3 total.

O