WebApp Sec mailing list archives
Re: Sample JAVA application
From: Jean-Jacques Halans <halans () gmail com>
Date: Mon, 8 Nov 2004 15:23:41 +0100
Following articles may be of interest to you: Java Security Guidelines: Developing and Using Java More Securely http://www.securingjava.com/chapter-seven/chapter-seven-1.html JSP Security for Limiting Access to Application-Internal URLs http://www.developer.com/java/article.php/883381 JSP Security http://www.onjava.com/pub/a/onjava/2001/06/27/java_security.html Hope it helps (although they may be outdated). Regards Jean-Jacques Halans On Fri, 22 Oct 2004 11:38:22 +0200, Chris Vanden Berghe <chris () vandenberghe org> wrote:
Hi all, I'm working on practical security of Web Applications and Web Services, especially on applications written in Java. You find a lot of information about the typical WA vulnerabilities (SQL inj, XSS, session handling errors, ...). Information that is more difficult to find is on which vulnerabilities are more likely in applications written in certain programming languages (or developed using a particular framework, concepts or tools). For my work it would be interesting to have an idea about which vulnerabilities are often encountered in WA or WS written in Java (using JSP, Servlets and EJB's). Is there anybody on this list who has seen some results of penetration tests or audits of Java WA/WS? What are the most common vulnerabilities discovered? Kind regards and thank you in advance, Chris.
-- Halans Jean-Jacques ================================
New Zealand Journal : http://nz.halans.be Honeymoon Australia : http://oz.halans.be
================================
Current thread:
- Sample JAVA application Chris Vanden Berghe (Oct 23)
- Re: Sample JAVA application Jeff Williams (Oct 25)
- Re: Sample JAVA application Chris Vanden Berghe (Nov 11)
- Re: Sample JAVA application Jeff Williams (Nov 11)
- Trouble with Reflection V.Benjamin Livshits (Nov 14)
- Re: Sample JAVA application Chris Vanden Berghe (Nov 11)
- Re: Sample JAVA application Jeff Williams (Oct 25)
- Re: Sample JAVA application Jean-Jacques Halans (Nov 08)
- <Possible follow-ups>
- Re: Sample JAVA application el (Oct 29)
- RE: Sample JAVA application Scott, Richard (Nov 05)
- Re: Sample JAVA application Chris Vanden Berghe (Nov 11)
- Re: Sample JAVA application Jeff Williams (Nov 12)
- Re: Sample JAVA application Chris Vanden Berghe (Nov 11)
- RE: Sample JAVA application Tal Mozes (Nov 06)
- RE: Sample JAVA application Michael Silk (Nov 07)