While Java offers an efficient framework for developing and deploying enterprise and Web 2.0 server or client-side applications, it also presents many risks. Perhaps chief among those risks with Java, being an interpreted language, is that its bytecode contains highly detailed metadata making compiled applications easy to reverse engineer, tamper and pirate. In our discussion we will consider and demonstrate some of the vulnerabilities and risks along with protection tools to pack when assessing or implementing Java application security.

Speaker: Mike Dulaney

Mike Dulaney joined Arxan in 2003 as a Software Security Analyst participating in and managing government-funded research studies to measure the effectiveness of software security.  Mr. Dulaney is now part of Arxan’s commercial sales organization as a Security Architect, a role in which he has contributed in a variety of functional areas— Technical Pre-Sales, Technical Support, Management, Rapid Prototyping, Security Forensics, and Threat Modeling.  Previously, Mr. Dulaney performed application security research and development throughout all stages of the application security lifecycle. He also helped bootstrap Arxan’s GuardIT product by designing and developing product security features and playing a key role in enabling support for new compilers and languages.  Mr. Dulaney earned a B.S. in Computer Science from Purdue University before completing post-graduate coursework at Purdue’s Krannert Graduate School of Management.

Meeting Location: PROS Pricing

3100 Main
10th floor
Houston, TX 77002

Suggested Parking:

Park across the street in the parking garage on Elgin on the 3rd or 4th floor in the Visitor designated spots. Walk across the skybridge on the 3rd floor and take the elevators on the right side of the elevator lobby to the 10th floor.

Meeting Sponsor: Arxan Software

Sponsor Website: http://www.arxan.com

http://www.arxan.com/software-protection-products/java-GuardIt/

Company Overview

Arxan is a leading provider of application hardening solutions designed to protect software applications from tampering to minimize risk and maximize profitability. Our products defend, detect, alert and react to attacks through a threat-based, customizable approach that is proven, easy to use and non-disruptive. Today, defense agencies as well as Global 500 companies, trust Arxan to protect their applications.

Door Prizes and Giveaways!

• JetBrains has donated one IntelliJ license to be raffled off at this HJUG meeting
• ZeroTurnaround has donated a license of JavaRebel to be raffled off this month