Bo0mB0om Posted May 25, 2015 Report Share Posted May 25, 2015 Secure Coding Rules for Java LiveLessons English |.FLV | h264, yuv420p, 1280x720, 30.00 fps® | aac, 44100 Hz, stereo | 2.98 Gb Genre: eLearning Java Professional Development LiveLessons provides developers with practical guidance for developing Java programs that are robust and secure. These LiveLessons complement The CERT Oracle Secure Coding Standard for Java In this video training, Robert provides complementary coverage to the rules in The CERT Oracle Secure Coding Standard for Java, demonstrating common Java programming errors and their consequences using Java 8 and Eclipse. Robert describes language behaviors left to the discretion of JVM and compiler implementers and guides developers in the proper use of Java's APIs including lang, util, Collections, Concurrency Utilities, Logging, Management, Reflection, Regular Expressions, Zip, I/O, JMX, JNI, Math, Serialization, and JAXP. Introduction Lesson 1: Java Security Concepts 1.1 Injection attacks 1.2 Leaking sensitive data 1.3 Denial-of-service attacks Lesson 2: Input Validation and Data Sanitization (IDS) IDS00-J. Prevent SQL Injection IDS01-J. Normalize strings before validating them IDS03-J. Do not log unsanitized user input IDS04-J. Safely extract files from ZipInputStream IDS06-J. Exclude unsanitized user input from format strings IDS07-J. Do not pass untrusted, unsanitized data to the Runtime.exec() method IDS08-J. Sanitize untrusted data passed to a regex IDS11-J. Perform any string modifications before validation IDS16-J. Prevent XML Injection IDS17-J. Prevent XML External Entity Attacks Lesson 3: Declarations and Initialization (DCL): DCL00-J. Prevent class initialization cycles Lesson 4: Expressions (EXP) EXP00-J. Do not ignore values returned by methods EXP01-J. Never dereference null pointers EXP02-J. Do not use the Object.equals() method to compare two arrays EXP03-J. Do not use the equality operators when comparing values of boxed primitives EXP04-J. Do not pass arguments to certain Java Collections Framework methods that are a different type than the collection parameter type EXP06-J. Expressions used in assertions must not produce side effects Lesson 5: Numeric Types and Operations (NUM) NUM00-J. Detect or prevent integer overflow NUM01-J. Do not perform bitwise and arithmetic operations on the same data NUM02-J. Ensure that division and modulo operations do not result in divide-by-zero errors NUM03-J. Use integer types that can fully represent the possible range of unsigned data NUM04-J. Do not use floating-point nuMbers if precise computation is required NUM05-J. Do not use denormalized nuMbers NUM07-J. Do not attempt comparisons with NaN NUM08-J. Check floating-point inputs for exceptional values NUM09-J. Do not use floating-point variables as loop counters NUM10-J. Do not construct BigDecimal objects from floating-point literals NUM11-J. Do not compare or inspect the string representation of floating-point values NUM12-J. Ensure conversions of numeric types to narrower types do not result in lost or misinterpreted data NUM13-J. Avoid loss of precision when converting primitive integers to floating-point Lesson 6: Characters and Strings (STR) STR00-J. Use an int to capture the return value of methods that read a character or byte STR01-J. Don't form strings containing partial characters STR02-J. Specify an appropriate locale when comparing locale-dependent data STR03-J. Do not convert between strings and bytes without specifying a valid character encoding STR04-J. Use compatible character encodings on both sides of file or network I/O DOWNLOAD http://rapidgator.net/file/306ab550cd58fefd7d003145f2eec1a6/Java_LiveLessons.part1.rar.html http://rapidgator.net/file/81df196771fa5bc84969ad20f55331ca/Java_LiveLessons.part2.rar.html http://rapidgator.net/file/71f6ce9e24136fccb4a6ab81034ad6c5/Java_LiveLessons.part3.rar.html http://rapidgator.net/file/64cbc93b773329956ce954ce839adb43/Java_LiveLessons.part4.rar.html http://rapidgator.net/file/e11620eec96e3ac5e83dc1d7cbd63993/Java_LiveLessons.part5.rar.html http://rapidgator.net/file/2b3feef6466ec243a44ae3894edcfc49/Java_LiveLessons.part6.rar.html http://rapidgator.net/file/5c1310fcb8d5b7068a065eaad99abbee/Java_LiveLessons.part7.rar.html http://uploaded.net/file/6ihwxam0/Java_LiveLessons.part1.rar http://uploaded.net/file/248ieeq5/Java_LiveLessons.part2.rar http://uploaded.net/file/bpirnfjb/Java_LiveLessons.part3.rar http://uploaded.net/file/mmv7hn99/Java_LiveLessons.part4.rar http://uploaded.net/file/f16yyt7y/Java_LiveLessons.part5.rar http://uploaded.net/file/uoo1fsbv/Java_LiveLessons.part6.rar http://uploaded.net/file/kjsasjlj/Java_LiveLessons.part7.rar http://www.uploadable.ch/file/cSy4WHt5gxHm/Java_LiveLessons.part1.rar http://www.uploadable.ch/file/Y6VzHwrQzhf7/Java_LiveLessons.part2.rar http://www.uploadable.ch/file/v7URTE85Pcmr/Java_LiveLessons.part3.rar http://www.uploadable.ch/file/KqeQpvNvaU9v/Java_LiveLessons.part4.rar http://www.uploadable.ch/file/hatHZ7QzgxgD/Java_LiveLessons.part5.rar http://www.uploadable.ch/file/Ue7kU9VtKQ8v/Java_LiveLessons.part6.rar http://www.uploadable.ch/file/rEaEUYUzGFNN/Java_LiveLessons.part7.rar http://www.hitfile.net/4PYc/Java_LiveLessons.part1.rar.html http://www.hitfile.net/4Q3l/Java_LiveLessons.part2.rar.html http://www.hitfile.net/4Pp7/Java_LiveLessons.part3.rar.html http://www.hitfile.net/4PuH/Java_LiveLessons.part4.rar.html http://www.hitfile.net/4Pvl/Java_LiveLessons.part5.rar.html http://www.hitfile.net/4Pw6/Java_LiveLessons.part6.rar.html http://www.hitfile.net/4Q0i/Java_LiveLessons.part7.rar.html Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now