Secure Coding Practices
What is a Common Weakness Enumeration - CWE
CWE stands for Common Weakness Enumeration. It is a community-developed list of software and hardware weakness types that can serve as a …
Posts
Java
Secure Coding Practices - Input Validation
What is - Input Validation? Input validation is a process used to ensure that the data provided to a system or application meets specific …
Security
Infection Method - Sub-Domain Takeover
A subdomain takeover is a type of cybersecurity vulnerability that occurs when an attacker gains control of a subdomain of a website or a …
Security
Infection Method - Domain Takeover
In this post, we will look at another method of infection. These are the attack vectors via domain names. This can happen at the main level, …
EclipseStore
EclipseStore High-Performance-Serializer
I will introduce you to the serializer from the EclipseStore project and show you how to use it to take advantage of a new type of …
EclipseStore
EclipseStore - Storing more complex data structures
How to store complex data structures using EclipseStore? Are there any restrictions? How can you work more efficiently on such structures? …
EclipseStore
How to start with EclipseStore - 01
We will take the first steps with the Eclipse Store here. I will show what the Eclipse Store is, how you can integrate it into your project …
Security
TDD and the impact on security
Test-driven development (TDD) is a software development approach that prioritizes writing automated tests while creating the actual code. …
DevSecOps
Introduction to the Linux Foundation's SLSA project
Supply Chain Security is a hot topic these days. And more and more, we as developers are dealing with this daily. But what does this mean …
DevSecOps
The Power of #JFrog Build Info (Build Metadata)
Intro This article will take a detailed look at what the term build-info is all about and why it will help us protect against attacks such …
DevSecOps
SolarWinds hack and the Executive Order from Mr Biden -- And now?
In the past two years, we have had to learn a lot about cybersecurity. The new attack vectors are becoming more and more sophisticated and …
DevSecOps
What is the difference between SAST, DAST, IAST and RASP?
Intro: In this post, we’re going to look at the differences between the various cybersecurity defence techniques. Here you can …