Skills Matter : Spring in Finance eXchange 2008: Mark Thomas

HOME

JAVA & JEE

OPEN SOURCE .NET

WEB & RIA

CLOUD & GRID

ARCHITECTURE & DDD

AGILE PM & SCRUM

AGILE TESTING & BDD

OS, MOBILE & SERVER

Spring in Finance eXchange 2008: Mark Thomas on Tomcat: Maximizing Performance & Security

Tomcat: Maximizing Performance & Security
Mark Thomas discusses how to maximize performance and security in Tomcat.

Review:
Mark Thomas, a senior software engineer from SpringSource and the leading contributor to Tomcat security, talks about how security vulnerabilities are handled by the Tomcat team and how end users are served while preventing security problems.

Mark discusses how using an open source project has the following disadvantage: as soon as a new version is published, the new version can be reverse engineered and vulnerabilities can be discovered. Therefore, commits are not announced as security vulnerabilities. Once a release is available for download vulnerabilities are announced.

Mark gives some examples of previous security issues and explains them briefly. Some of the vulnerabilities do not apply for all versions of a release. Upgrading or patching can be appropriate solutions in most cases. Mark demonstrates how these are done by changing the Tomcat configuration. Clustering can be another option and he explains how can this be achieved towards the end of the talk.
Review by Eren Aykin

ABOUT MARK THOMAS

Mark Thomas is a Senior Software Engineer with SpringSource, has a MEng in Electronic and Electrical Engineering from the University of Birmingham, UK and is a Senior Software Engineer and Consultant with the Covalent Products Division of SpringSo
More about Mark Thomas

PODCAST TOMCAT: MAXIMIZING PERFORMANCE

SPONSORS

CLOUD & GRID COURSES

	DEVELOPING WITH SALESFORCE.COM..
	AMAZON WEB SERVICES EC2 S3 WORKSHOP
	ARI ZILKA'S CORE TERRACOTTA WORKSHOP
	BRIAN SLETTEN'S SEMANTIC WEB BOOTCAMP
	BUILDING GOOGLE MAPS
	CHRIS RILEY'S CLOUD COMPUTING TECHNOLOGY OVERVIEW
	CHRIS RILEY'S DEVELOPING IN MICROSOFT AZURE
	DEPLOYING UBUNTU ENTERPRISE CLOUD
	EHCACHE CORE TRAINING
	MATSON WADE'S DEVELOPING WITH AMAZON CLOUD STORAGE
	MATSON WADE'S DEVELOPING WITH GOOGLE APP ENGINE
	NEIL BARTLETT'S OSGI WORKSHOP
	RDFA THE THEORY AND PRACTICE OF STRUCTURED DATA PU
	RICK EVANS' COHERENCE CLUSTERED CACHING
	ROBERT SCHNEIDERS CLOUD COMPUTING FOR MANAGERS
	SUPPORTING UBUNTU 8.04 LTS

CLOUD & GRID PODCASTS

	Enabling Choice, Enabling the Market Russ Miles : 11th Mar 2010
	Energy, carbon, and clouds Joe Baguley : 11th Mar 2010
	SaaS - an unintended casualty of the cop Chris Swan : 11th Mar 2010
	Cloud Computing Geir Magnusson Jr : 11th Mar 2010
	Welcome to Cloudcamp Simon Wardley : 11th Mar 2010
	Big Cloud Debate : 11th Mar 2010
	Unpack Discussion : 11th Mar 2010
	Bring Wallpapers to Life with Android 2. Kieran Gutteridge : 18th Feb 2010
	Re-writing Java classes in Scala - and m Colin Howe : 8th Feb 2010
	Pragmatic Clouds Joe Baguley : 8th Feb 2010
	Unpanel Discussion : 8th Feb 2010
	Amazon EC2 and S3: Cloud computing in tw Daniel Sikar : 1st Feb 2010
	Where are the Big Customers? Max Robbins : 21st Jan 2010
	Key Technical Differences between Cloud Gojko Adzic : 21st Jan 2010
	How the Cloud is Shaping Next Generation James Liddle : 21st Jan 2010

OTHER CLOUD & GRID EVENTS

	amazon web services user group FREE EVENT: Daniel Sikar on AWS London, Thursday, March 25th
	Ehcache Core Training 2 DAY COURSE. London, Monday, April 19th
	Chris Riley's Cloud Computing Technology Overview 1 DAY COURSE. Featuring Robert Schneider London, Thursday, April 22nd
	Cloud & Grid eXchange 2010 CONFERENCE (1 DAY) London, Friday, April 23rd BOOK NOW!
	Matson Wade's Developing with Google App Engine 1 DAY COURSE. Featuring Matson Wade London, Monday, April 26th
	Deploying Ubuntu Enterprise Cloud 2 DAY COURSE. Paris, Tuesday, April 27th
	Matson Wade's Developing with Amazon Cloud Storage 1 DAY COURSE. Featuring Matson Wade London, Tuesday, April 27th
	Rick Evans' Coherence Clustered Caching 2 DAY COURSE. Featuring Rick Evans Paris, Thursday, April 29th