Threat Analaysis

In this video, you will learn about serialization and why deserialization is a threat to a system.

Serialization is the process of turning an object into a data format, and deserialization is the reverse process (i.e. it takes the data and rebuilds it into an object). In this video, you will learn how these two processes work and how flaws in deserialization make your system vulnerable.