Is your Java code secure -- or exposed? (IBM developerWorks)
[Posted July 17, 2002 by cook]
IBM's developerWorks has
an article about dealing with static security vulnerabilities
in Java web applications.
"
Applications can be vulnerable to two kinds of security threats: static and dynamic. While dynamic threats are not fully under a developer's control, there are precautions you can take to counteract static threats while developing an application. This article outlines and explains 13 types of static exposures -- flaws in a system that leave it open to an attacker who wants to usurp privileges on that system. You'll learn how to deal with these exposures and discover the impact they can have if they are not addressed."
(
Log in to post comments)