Page History

MITRE 2009CWE

CWE ID 499, "Serializable Class Containing Sensitive Data"

CWE ID 502, "Deserialization of Untrusted Data"

SCG 2009

Guideline 5-2 Guard sensitive data during serialization

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="0fdbd2ded3ef0313-c892f6e3-4aaf4766-aa7d8012-d8ba9e60dbcab9b72a93a893"><ac:plain-text-body><![CDATA[

[[Bloch 2005

AA. Bibliography#Bloch 05]]

Puzzle 83: Dyslexic Monotheism

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="7940a81f8c9b9f7e-d6fef4c0-44fa4e8b-9c8a8ea9-e96fee989c8abe46a23ce264"><ac:plain-text-body><![CDATA[

[[Bloch 2001

AA. Bibliography#Bloch 01]]

Item 1: Enforce the singleton property with a private constructor

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="2e5ffd16057f6e8e-ced2e569-465a49e2-a3758367-b004be114838fa15c949a780"><ac:plain-text-body><![CDATA[

[[Greanier 2000

AA. Bibliography#Greanier 00]]

[Discover the secrets of the Java Serialization API

http://java.sun.com/developer/technicalArticles/Programming/serialization/]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="23b81dcffaacb931-e059d575-4ec84343-ba0bae30-899ea670d36e8c66b3632f78"><ac:plain-text-body><![CDATA[

[[Harold 1999

AA. Bibliography#Harold 99]]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="c708602565be4c3d-13ed764b-4b5341d2-8a31aca2-69ea0726cb6047599ee0ddaa"><ac:plain-text-body><![CDATA[

[[JLS 2005

AA. Bibliography#JLS 05]]

[Transient modifier

http://java.sun.com/docs/books/jls/third_edition/html/classes.html#37020]

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="f3d0563ec518edb2-998b481e-4c3a4b5a-a54aa8ed-d8b5a115863dbf96e14765dc"><ac:plain-text-body><![CDATA[

[[Long 2005

AA. Bibliography#Long 05]]

Section 2.4, Serialization

]]></ac:plain-text-body></ac:structured-macro>

<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="45c7181a533956b7-5fe6f55b-47414e95-9424bbbc-a8fa0fddac27b6e49703a063"><ac:plain-text-body><![CDATA[

[[Sun 2006

AA. Bibliography#Sun 06]]

"Serialization specification: A.4 Preventing Serialization of Sensitive Data"

]]></ac:plain-text-body></ac:structured-macro>