...
| Wiki Markup |
|---|
\[[API 2006|AA. Bibliography#API 06]\] \[[Gong 2003|AA. Bibliography#Gong 03]\] 11.3.3 "Securing RMI Communications" \[[MITRE 2009|AA. Bibliography#MITRE 09]\] [CWE ID 311|http://cwe.mitre.org/data/definitions/311.html] "Failure to Encrypt Sensitive Data" \[[Ware 2008|AA. Bibliography#Ware 08]\] |
...
SER03-J. Do not serialize Prevent serialization of unencrypted, sensitive data 16. Serialization (SER) SER05-J. Do not allow serialization and deserialization to bypass the Security Manager