[In]secure Deserialization, And How [Not] To Do It

Alexei Kojenov at Global AppSec Amsterdam 2019