Serialization and Object Graph Communication
summary
Covers Java object serialization: its original design goals in the 1990s (transparent persistence and distributed objects like Java RMI), how serialization and deserialization are used in software, the design flaws and security vulnerabilities discovered over time, and measures to avoid deserialization vulnerabilities when handling untrusted input.
AI-written summary · about
chapters (15)
- 0:00Intro
- 1:25Safe Harbor Statement
- 7:05Status Quo / JDK Serialization
- 12:32Status Quo / Future
- 15:58Bulletproof Serialization
- 17:47How it works
- 21:24No Limitations
- 25:07Superior Performance
- 26:04Benefits
- 27:19Custom Type Handler
- 33:32Custom Legacy Type Handler
- 36:31Installation
- 37:10Client
- 37:53Integrations in the Making
- 39:28Object Graph Streaming
related talks
45mSerialization & Object Graph Communication
41mJava Serialisation: A Modern Fairytale
49mMarshalling: Data-Oriented Serialization
41mHigh-Secure Java Serialization
53mWhy We Hate Java Serialization And What We're Doing About It
47mA Modern Fairy Tale: Java Serialization
23mSerialization 2.0
51mSerialization: A New Hope