Eliminate the Biggest Security Issue in Java with Eclipse Serializer - OCX 2024

Показать описание

Using Java serialization is a high-potential security risk. 50% of all vulnerabilities in Java are linked to serialization. The architects of Java call it a horrible mistake. Basically, there are numerous alternative serialization frameworks out there, but most of them are based on Java serialization and inherited all vulnerabilities, or focus on other aspects such as human readable formats. Additionally, Java serialization is slow and has various restrictions. The Java community is waiting for a long time for a deciding improvements. Eclipse Serializer is written from scratch to solve these problems. Eclipse Serializer is a high-secure serialization framework that works fundamentally different from the traditional Java serialization approach. Injecting and executing malicious code through deserialization is now impossible. Deserialization attacks are eliminated. At the same time, there are no more annoying restrictions.