java-deserialization

2 talks tagged with this topic.

Filters+

Loading filters…

1–2 of 2 talks · loading…

Sort

Briefings·35 min

Black Hat
AppSec
Date: Aug 2025
Location: Las Vegas

QUACK: Hindering Deserialization Attacks via Static Duck Typing

Neophytos Christou · Andreas Kellas

Managed languages facilitate convenient ways for serializing objects, allowing applications to persist and transfer them easily, yet this feature opens them up to attacks.

java-deserializationstatic-analysissoftware-hardening

AusCERT·27 min

AUSCERT
AppSec
Date: 2022
Location: Auscert

Conference Day 2 - LOG4SHELL: A BRIEF HISTORY OF JAVA DESERIALIZATION VECTORS

Outlines conference Day 2 - LOG4SHELL: A BRIEF HISTORY OF JAVA DESERIALIZATION VECTORS and evaluates key implications for security practitioners.

log4shell-briefbrief-historyhistory-java+2