Owasp top 10 Security Risks & Vulnerabilities Note

Insecure Deserialization

Note: The OWASP Top 10 noted that this security risk was added by an industry survey and not based on quantifiable data research.

Every web developer needs to make peace with the fact that attackers/security researchers are going to try to play with everything that interacts with their application–from the URLs to serialized objects.

In computer science, an object is a data structure; in other words, a way to structure data. To make it easier to understand some key concepts:

• 
  The process of serialization is converting objects to byte strings.
  
• 
  The process of deserialization is converting byte strings to objects.