QUACK: Hindering Deserialization Attacks via Static Duck Typing
Managed languages facilitate convenient ways for serializing objects, allowing applications to persist and transfer them easily, yet this feature opens them up to attacks.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
OWASP Foundation·51 min
Security researchers examine technical aspects of Real World Static Analysis For Real Humans Adrian Bravo & Nick Gonella.
static-analysisstaticanalysi+1
OWASP Foundation·22 min
Analysts investigate attack surfaces and defenses concerning AppSecCali 2019 Lightning Talk - Endpoint Finder: A static analysis tool to find web endpoints.
webstatic-analysisappseccali+2
OWASP Foundation·39 min
Justin Collins
AppSecUSA 2016 explores Justin Collins - Practical Static Analysis for Continuous Application Security.
application-securitystatic-analysisjustin+3