OWASP Top 10 - A6 Sensitive Data Exposure

Description We have seen in the previous articles that an experienced attacker can easily intercept…

Read More


Nov 18, 2013 4 min read

Philippe Cery

OWASP

OWASP Top 10 - A5 Security Misconfiguration

Description Nowadays, besides the operating system and the JRE, most of the Java applications are…

Read More


Nov 14, 2013 7 min read

Philippe Cery

OWASP

OWASP Top 10 - A4 Insecure Direct Object References

Description The application exposes a direct reference (functional identifier, database key, file path…) to a…

Read More


Nov 04, 2013 2 min read

Philippe Cery

OWASP

OWASP Top 10 - A3 Cross Site Scripting (XSS)

Description Cross-Site Scripting is a specific consequence of an injection attack. The goal is to…

Read More


Oct 28, 2013 3 min read

Philippe Cery

OWASP

OWASP Top 10 - A2 Broken Authentication and Session Management

Description The attacker steals his victim’s credentials or any information that will help him…

Read More


Oct 21, 2013 10 min read

Philippe Cery

OWASP

OWASP Top 10 - A1 Injection

Description The attacker sends untrusted data that will be injected in the targeted application to…

Read More


Oct 11, 2013 5 min read

Philippe Cery

OWASP

OWASP Top 10 - Introduction

When starting a new web application, the security risks are sadly often underestimated by everyone…

Read More


Oct 10, 2013 2 min read

Philippe Cery

OWASP

Improving the performance of the Spring-Petclinic sample application (part 5 of 5)

This is part 5 of our 5-part series on improving the performance of the Spring-petclinic…

Read More


Mar 15, 2013 2 min read

Julien Dubois

Performance

Improving the performance of the Spring-Petclinic sample application (part 4 of 5)

This is part 4 of our 5-part series on improving the performance of the Spring-petclinic…

Read More


Mar 14, 2013 3 min read

Julien Dubois

JPA

Improving the performance of the Spring-Petclinic sample application (part 3 of 5)

This is part 3 of our 5-part series on improving the performance of the Spring-petclinic…

Read More


Mar 13, 2013 3 min read

Julien Dubois

Performance

Improving the performance of the Spring-Petclinic sample application (part 2 of 5)

This is part 2 of our 5-part series on improving the performance of the Spring-petclinic…

Read More


Mar 12, 2013 3 min read

Julien Dubois

Performance

Improving the performance of the Spring-Petclinic sample application (part 1 of 5)

This post is a performance audit of the “spring-petclinic” sample application [https://github.com/SpringSource/…

Read More


Mar 11, 2013 3 min read

Julien Dubois

Performance