All posts by : Shubham Haldkar

Use PreparedStatements   Sanitize user input strings

PreparedStatement

Store a hash and a salt Use PBKDF2WithHMacSHA256

Use Java 7 try-with-resources Don't throw FileNotFoundExceptions to client code

Native code bypasses Java security checks

Print a stack trace in the exception handler

java.policy

Isolation may be breached via untrusted code access to mutable statics   Containers are code that manages other code with a lower level of trust

Catch PrivilegedAction exceptions   Use the PrivilegedExceptionAction interface

It uses stack-based access control   Any frame without permission will cause the entire context to be denied permission

Use SSL for sensitive data Use the Java SDK Keystore tool

Which of the following are the best practices for secure user authentication?   Construct queries with the password encrypted Use PreparedStatements Sanitize user input strings...

Which JDBC class can help to prevent SQL injection attacks?   PreparedStatement Statement ResultSet Connection

Which of the following are the best practices for maintaining data confidentiality in Java?   Use Java 7 try-with-resources Print a stack trace for exceptions in production Don't...

What are the best practices for secure password storage?   Use java.util.Random Store a hash and a salt Store encrypted passwords Use PBKDF2WithHMacSHA256

Which of the following is true for secure caller access in Java?   Native code bypasses Java security checks Create public methods in trusted classes to give access to untrusted...

Which of the following should you do in development, but not in production code, when working with security contexts?   Get the context with AccessController.getContext Null check any...

What should programmers be aware of when using containers?   Java.awt.Frames.getFrames is a static global Isolation may be breached via untrusted code access to mutable statics Code...

What is the default Java policy file?   java.policy policy.extension extension.policy policy.java

Which of the following are the best practices for working with doPrivileged?   Keep all code inside the run method Catch PrivilegedAction exceptions Allow caller to directly provide...