---
id: 2408
title: "Introducing the RubySec Field Guide"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2015/06/08/introducing-the-rubysec-field-guide/"
published_at: "2015-06-08T11:50:54Z"
tags: ["ruby", "fuzzing", "secure-coding", "web-security", "deserialization", "security-training", "training", "education", "rootkit", "guide", "rails", "yaml", "yaml-deserialization", "defensive-programming", "rack"]
phying_url: "https://phying.com/item/2408"
lang: en
---

# Introducing the RubySec Field Guide

## Summary

Trail of Bits releases the RubySec Field Guide, a training resource on YAML deserialization flaws, Rails vulnerability root causes, Rack rootkit techniques, and defensive Ruby programming practices.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2015-06-08T11:50:54Z
- **Original:** https://blog.trailofbits.com/2015/06/08/introducing-the-rubysec-field-guide/
- **Phying News:** https://phying.com/item/2408