Dear Matt,
If you want to get familiar with common Java specific security errors enlisted by different vulnerability categories, the Fortify taxonomy might give you a comprehensive overview:
http://www.fortify.com/vulncat/en/vulncat/index.html Open Java/JSP in the tree on the left, and enjoy! :) Best regards, Erno Erno JEGES SEARCH-LAB Ltd www.search-lab.hu PHONE/FAX: +36 1 2053098 MOB: +36 20 4200075 SKYPE: jegeserno On Wed, 31 Mar 2010, Matt Parsons wrote:
I am trying to become an expert in source code review in java application security. Are there any experts on this list that are willing to share some of their knowledge? I am reading Java Security by Scott Oaks and I am rereading all of the Sun Docs on java security. Any help would be greatly appreciated. Thanks, Matt Matt Parsons, MSM, CISSP 315-559-3588 Blackberry 817-294-3789 Home office "Do Good and Fear No Man" Fort Worth, Texas A.K.A The Keyboard Cowboy mailto:mparsons1...@gmail.com http://www.parsonsisconsulting.com http://www.o2-ounceopen.com/o2-power-users/ http://www.linkedin.com/in/parsonsconsulting http://parsonsisconsulting.blogspot.com/ http://www.vimeo.com/8939668 0_0_0_0_250_281_csupload_6117291 untitled
_______________________________________________ Secure Coding mailing list (SC-L) SC-L@securecoding.org List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l List charter available at - http://www.securecoding.org/list/charter.php SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com) as a free, non-commercial service to the software security community. Follow KRvW Associates on Twitter at: http://twitter.com/KRvW_Associates _______________________________________________
