June 2017
Beginner
1296 pages
69h 23m
English
It’s important for developers to be aware of Java security enhancements. In this section, we provide brief mentions of a few Java 9 security-related features and where you can learn more about each.
Java’s object serialization mechanism enables programs to create serialized objects—sequences of bytes that include each object’s data, as well as information about the object’s type and the types of the object’s data. After a serialized object has been output, it can be read into a program and deserialized—that is, the type information and bytes that represent the object are used to recreate the object in memory.
Deserialization has the potential for security problems. ...