What is DevSecOps?
DevSecOps definition At its core, DevSecOps is a framework that integrates security practices into every stage of the software development lifecycle
Read MoreAuthor: Timon
What is static application security testing (SAST)?
What is SAST? Static application security testing (SAST) is a method for analyzing source code, bytecode, or binaries to identify
Read MoreWhat is application security and how does it work?
Why is application security important? With the rise of cloud-based apps and services, applications are often targeted by attackers seeking
Read MoreWhat is runtime application self-protection (RASP)?
Runtime application self-protection, or RASP, is a security technology that operates within software applications to monitor, detect, analyze, and protect
Read More
RASP Protects Against the GeoServer XXE Vulnerability(CVE-2025-58360)
The application accepts XML input through a specific endpoint /geoserver/wms operation GetMap. However, this input is not sufficiently sanitized or restricted, allowing an attacker to define external entities within the XML request.
Read More
How RASP Protects Against the XXE Vulnerability CVE-2025-66516
XXE injection refers to a web security vulnerability that allows an attacker to interfere with an application’s processing of XML data. This, in turn, makes it possible to access files on the application server file system and, in some cases, even, achieve remote code execution.
Read More
How to choose hook points to protect against from Java command execution?
Traditional RASP solutions typically hook at the first layer shown in Figure 1-2—specifically, the
Java Naming and Directory Interface Overview
Any work with JNDI requires an understanding of the underlying service as well as an accessible implementation. For example, a database connection service calls for specific properties and exception handling.
Read MoreHow to Run a Shell Command in Java
Shell commands are OS-dependent as their behavior differs across systems. So, before we create any Process to run our shell command in, we need to be aware of the operating system on which our JVM is running.
Read MoreWhat is runtime application self-protection (RASP)?
Runtime application self-protection, or RASP, is a security technology that operates within software applications to monitor, detect, analyze, and protect against malicious activity automatically in real-time while the application is running.
Read More