Build High-Secure Applications with Eclipse Serializer
summary
Claims that Eclipse Serializer removes Java deserialization as the main security hole by never transferring class bytecode and eliminates deserialization attacks. The library writes object data directly into heap memory and recreates objects without JVM reflection so no gadget code runs, and a custom binary format plus legacy type mapping handles schema migration. It serializes complex graphs with circular references, runs on Java 8+, and is production-ready as an Eclipse project and Maven artifact.
AI-written summary · about
chapters (9)
- 0:00Eclipse Serializer intro
- 2:57Java serialization insecurity
- 8:40How Eclipse Serializer secures data
- 13:38Key advantages
- 17:57Performance and compatibility
- 20:07Limitations and migration
- 21:54Roadmap and community
- 23:06Q&A and use cases
- 33:17Eclipse Serializer for object storage
related talks
42mEclipse Serializer – Biggest Security Flaw of Java Is Eliminated
41mHigh-Secure Java Serialization
41mJava Serialisation: A Modern Fairytale
47mA Modern Fairy Tale: Java Serialization
41mThe Evolution of Data Processing with Java
53mWhy We Hate Java Serialization And What We're Doing About It
44mCaching Unleashed: Revolutionizing Java Performance
48mHidden Security Features of the JVM - Everything You Didn’t Know and More