|
|
Spring in Finance eXchange 2008: Mark Thomas on Tomcat: Maximizing Performance & Security
Tomcat: Maximizing Performance & Security
Mark Thomas discusses how to maximize performance and security in Tomcat.
Review:
Mark Thomas, a senior software engineer from SpringSource and the leading contributor to Tomcat security, talks about how security vulnerabilities are handled by the Tomcat team and how end users are served while preventing security problems.
Mark discusses how using an open source project has the following disadvantage: as soon as a new version is published, the new version can be reverse engineered and vulnerabilities can be discovered. Therefore, commits are not announced as security vulnerabilities. Once a release is available for download vulnerabilities are announced.
Mark gives some examples of previous security issues and explains them briefly. Some of the vulnerabilities do not apply for all versions of a release. Upgrading or patching can be appropriate solutions in most cases. Mark demonstrates how these are done by changing the Tomcat configuration. Clustering can be another option and he explains how can this be achieved towards the end of the talk.
Review by Eren Aykin
ABOUT MARK THOMAS
|
Mark Thomas is a Senior Software Engineer with SpringSource, has a
MEng in Electronic and Electrical Engineering from the University of
Birmingham, UK and is a Senior Software Engineer and Consultant with the
Covalent Products Division of SpringSo
More about Mark Thomas
|
|
PODCAST TOMCAT: MAXIMIZING PERFORMANCE
|
|
|
|
OTHER JAVA & JEE EVENTS
|
Spring Application Development
4 DAY COURSE. Featuring David Syer
London, Tuesday, March 23rd
|
|
Tapestry 5 in Action
FREE EVENT:
In The Brain of Ben Gidley
London, Tuesday, March 23rd
|
|
JAVAWUG
FREE EVENT:
Ease into Scala Web Developmen
London, Wednesday, March 24th
|
|
Gojko Adzic's TDD Java Development Workshop
2 DAY COURSE.
Paris, Wednesday, March 31st
|
|
|
Spring OSGi with dm Server
2 DAY COURSE.
London, Thursday, April 8th
|
|
London Scala Users' Group
FREE EVENT:
Traits & Mixins
London, Monday, April 12th
|
|
|
Tomcat Administration Fundamentals Training
2 DAY COURSE.
London, Tuesday, April 13th
|
|
|
Spring Hibernate O/R Mapping
3 DAY COURSE.
London, Wednesday, April 14th
|
|
|
|
