|
|
Spring in Finance eXchange 2008: Mark Thomas on Tomcat: Maximizing Performance & Security
Tomcat: Maximizing Performance & Security
Mark Thomas discusses how to maximize performance and security in Tomcat.
Review:
Mark Thomas, a senior software engineer from SpringSource and the leading contributor to Tomcat security, talks about how security vulnerabilities are handled by the Tomcat team and how end users are served while preventing security problems.
Mark discusses how using an open source project has the following disadvantage: as soon as a new version is published, the new version can be reverse engineered and vulnerabilities can be discovered. Therefore, commits are not announced as security vulnerabilities. Once a release is available for download vulnerabilities are announced.
Mark gives some examples of previous security issues and explains them briefly. Some of the vulnerabilities do not apply for all versions of a release. Upgrading or patching can be appropriate solutions in most cases. Mark demonstrates how these are done by changing the Tomcat configuration. Clustering can be another option and he explains how can this be achieved towards the end of the talk.
Review by Eren Aykin
ABOUT MARK THOMAS
|
Mark Thomas is a Senior Software Engineer with SpringSource, has a
MEng in Electronic and Electrical Engineering from the University of
Birmingham, UK and is a Senior Software Engineer and Consultant with the
Covalent Products Division of SpringSo
More about Mark Thomas
|
|
PODCAST TOMCAT: MAXIMIZING PERFORMANCE
|
|
|
|
OTHER CLOUD & GRID EVENTS
|
amazon web services user group
FREE EVENT:
Daniel Sikar on AWS
London, Thursday, March 25th
|
|
Ehcache Core Training
2 DAY COURSE. London, Monday, April 19th
|
|
Chris Riley's Cloud Computing Technology Overview
1 DAY COURSE. Featuring Robert Schneider London, Thursday, April 22nd
|
|
Cloud & Grid eXchange 2010
CONFERENCE (1 DAY)
London, Friday, April 23rd
BOOK NOW!
|
|
Matson Wade's Developing with Google App Engine
1 DAY COURSE. Featuring Matson Wade London, Monday, April 26th
|
|
Deploying Ubuntu Enterprise Cloud
2 DAY COURSE. Paris, Tuesday, April 27th
|
|
Matson Wade's Developing with Amazon Cloud Storage
1 DAY COURSE. Featuring Matson Wade London, Tuesday, April 27th
|
|
Rick Evans' Coherence Clustered Caching
2 DAY COURSE. Featuring Rick Evans Paris, Thursday, April 29th
|
|
|
|