on-demand course

Secure Coding Rules for Java, Part I

with Robert Seacord

October 2015

Advanced

3h 11m

English

Pearson

Closed Captioning available in English, Japanese, Korean, Chinese (Simplified), Chinese (Traditional)

Watch now

Unlock full access

Includes

Earns Badge

Course outline

Secure Coding Rules for Java: Introduction
2m 10s
Injection attacks
15m 46s
Leaking sensitive data
5m 4s
Denial-of-service attacks
8m 2s
IDS00-J. Prevent SQL Injection
8m 54s
IDS01-J. Normalize strings before validating them
5m 5s
IDS03-J. Do not log unsanitized user input
3m 32s
IDS04-J. Safely extract files from ZipInputStream
5m 10s
IDS06-J. Exclude unsanitized user input from format strings
5m 47s
IDS07-J. Do not pass untrusted, unsanitized data to the Runtime.exec() method
3m 33s
IDS08-J. Sanitize untrusted data passed to a regex
4m 21s
IDS11-J. Perform any string modifications before validation
7m 12s
IDS16-J. Prevent XML Injection
9m 34s
IDS17-J. Prevent XML External Entity Attacks
6m 19s
DCL00-J. Prevent class initialization cycles
5m 10s
EXP00-J. Do not ignore values returned by methods
2m 16s
EXP01-J. Never dereference null pointers
5m 13s
EXP02-J. Do not use the Object.equals () method to compare two arrays
3m 27s
EXP03-J. Do not use the equality operators when comparing values of boxed primitives
7m 44s
EXP04-J. Do not pass arguments to certain Java Collections Framework methods that are a different type than the collection parameter type
4m 38s
EXP06-J. Expressions used in assertions must not produce side effects
1m 35s
NUM00-J. Detect or prevent integer overflow
6m 3s
NUM01-J. Do not perform bitwise and arithmetic operations on the same data
3m 43s
NUM02-J. Ensure that division and modulo operations do not result in divide-by-zero errors
54s
NUM03-J. Use integer types that can fully represent the possible range of unsigned data
2m 58s
NUM04-J. Do not use floating-point numbers if precise computation is required
2m 26s
NUM05-J. Do not use denormalized numbers
3m 9s
NUM07-J. Do not attempt comparisons with NaN
1m 27s
NUM08-J. Check floating-point inputs for exceptional values
3m 32s
NUM09-J. Do not use floating-point variables as loop counters
2m 2s
NUM10-J. Do not construct BigDecimal objects from floating-point literals
1m 8s
NUM11-J. Do not compare or inspect the string representation of floating-point values
1m 53s
NUM12-J. Ensure conversions of numeric types to narrower types do not result in lost or misinterpreted data
5m 1s
NUM13-J. Avoid loss of precision when converting primitive integers to floating-point
2m 57s
STR00-J. Don't form strings containing partial characters from variable-width encodings
13m 32s
STR01-J. Do not assume that a Java char fully represents a Unicode code point
10m 15s
STR02-J. Specify an appropriate locale when comparing locale-dependent data
3m 44s
STR03-J. Do not encode non-character data as a string
4m 22s
STR04-J. Use compatible character encodings when communicating string data between JVMs
2m 6s

Content preview from Secure Coding Rules for Java, Part I

EXP04-J. Do not pass arguments to certain Java Collections Framework methods that are a different type than the collection parameter type

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Start your free trial

Secure Coding Rules for Java: Serialization

Robert C. Seacord

Secure Programming with Java

Howard Poston

Learning Apache Maven

Kevin Bowersox

Building High Performance Java 17 Applications: Using GraalVM Native Image and Apache OpenJDK 17

Tarun Telang

Publisher Resources

ISBN: 9780134031521

Secure Coding Rules for Java, Part I

with Robert Seacord

Introduction

Lesson 1: Java Security Concepts

Lesson 2: Input Validation and Data Sanitization (IDS)

Lesson 3: Declarations and Initialization (DCL):

Lesson 4: Expressions (EXP)

Lesson 5: Numeric Types and Operations (NUM)

Lesson 6: Characters and Strings (STR)

Content preview from Secure Coding Rules for Java, Part I

EXP04-J. Do not pass arguments to certain Java Collections Framework methods that are a different type than the collection parameter type

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

You might also like

Secure Coding Rules for Java: Serialization

Secure Programming with Java

Learning Apache Maven

Building High Performance Java 17 Applications: Using GraalVM Native Image and Apache OpenJDK 17

Publisher Resources

Introduction

Lesson 1: Java Security Concepts

Lesson 2: Input Validation and Data Sanitization (IDS)

Lesson 3: Declarations and Initialization (DCL):

Lesson 4: Expressions (EXP)

Lesson 5: Numeric Types and Operations (NUM)

Lesson 6: Characters and Strings (STR)

Content preview from Secure Coding Rules for Java, Part I

EXP04-J. Do not pass arguments to certain Java Collections Framework methods that are a different type than the collection parameter type

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,and much more.

You might also like

Secure Coding Rules for Java: Serialization

Secure Programming with Java

Learning Apache Maven

Building High Performance Java 17 Applications: Using GraalVM Native Image and Apache OpenJDK 17

Publisher Resources

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.