Java Security: Log4J, the SecurityManager, and Funding
- March 24, 2023
- 1410 Unique Views
- < 1 min read
A demonstration of log4j exploits, which defenses people tried, and which worked.
We'll cover how groups responded effectively to patch to see what was common.
We'll also look at open source funding models, subscriptions, and bug bounty programs to see why it's sometimes hard to donate.
This talk uses actual exploit code that takes over systems through their log messages to open calculators.
Don’t Forget to Share This Post!
Erik Costlow was Oracle’s principal product manager for Java 8 and 9, focused on security and performance. His security expertise involves threat modeling, code analysis, and instrumentation of security sensors. He is working to broaden this approach to security with Contrast Security. Before becoming involved in technology, Erik was a circus performer who juggled fire on a three-wheel vertical unicycle.
Comments (0)
No comments yet. Be the first.