Applications that trust serialized data can accept manipulated objects that alter program behavior. Developers review serialization concepts, work through an unsafe example using available tools, and examine code-level practices for preventing insecure deserialization.

Participants of this module will…

• Understand the general concepts of serialization and deserialization
• Be able to exploit unsafe serialization using freely available tools
• Learn how to prevent unsafe serialization vulnerabilities in code