INSECURE DESERIALIZATION - TALK
An object in a program A is converted to a byte stream, and the same byte stream is converted back to the object to be used in a program B. This is called as serialization and de-serialization.
X can be persistent storage, or a network medium, etc.,.t
This talk is all about the negative impacts and live exploits, and demos on Insecure Deserialization.