Insecure Deserialization, and How Not to Do It

Explore the critical topic of insecure deserialization in this 40-minute conference talk from the OWASP Foundation. Dive into practical demonstrations, including a session cookie demo, to understand the problem and its solutions. Learn about major vulnerabilities affecting popular platforms like .NET and CyberArk. Gain valuable insights on how to implement secure deserialization practices and protect your applications from potential attacks.

Introduction
Demos
Session Cookie
Demo
The problem
The solution
Big vulnerabilities
NetCyberark
Conclusion