Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
How can I secure the serialized object if I send the serialized object over the network?
I doubt that hackers may interrupt/hack my data.
can anyone tell in detail about how to implement this?
This presentation give ideas on how effectively attackers can tamper a Java serialized stream:
https://www.owasp.org/images/e/eb/OWASP_IL_2008_Shai_Chen_PT_to_Java_Client_Server_Apps.ppt
There is also the risk of injecting unsuspected behavior and inject code in case a vulnerable class exists on the server’s classpath. See this article:
[Look-ahead Java deserialization][3]